Edit tour

Windows Analysis Report
mscoree.dll

Overview

General Information

Sample name:	mscoree.dll
Analysis ID:	1595355
MD5:	ba5704d005e8c378dc48bdbcb00c1314
SHA1:	b78f573f5ae8684cc5a5b12f2827c0cee2a309d7
SHA256:	a197804c6ae915f59add068e862945b79916c92a508c0287a97db718e72280a3
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Checks if the current process is being debugged

Connects to many different domains

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Creates a process in suspended mode (likely to inject code)

Detected non-DNS traffic on DNS port

Detected potential crypto function

Drops PE files

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

PE file contains sections with non-standard names

Registers a DLL

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Scripting/CommandLine Process Spawned Regsvr32

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

loaddll64.exe (PID: 5472 cmdline: loaddll64.exe "C:\Users\user\Desktop\mscoree.dll" MD5: 763455F9DCB24DFEECC2B9D9F8D46D52)

conhost.exe (PID: 4956 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 4724 cmdline: cmd.exe /C rundll32.exe "C:\Users\user\Desktop\mscoree.dll",#1 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

rundll32.exe (PID: 5648 cmdline: rundll32.exe "C:\Users\user\Desktop\mscoree.dll",#1 MD5: EF3179D498793BF4234F708D3BE28633)

firefox.exe (PID: 1860 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5828 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2172 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2ad9795c-bfec-4a59-9af3-8c3376ad500c} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232ca86c510 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7304 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3400 -parentBuildID 20230927232528 -prefsHandle 3224 -prefMapHandle 3220 -prefsLen 25337 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b1b12ce8-1418-4648-909e-d132dd7b09ac} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232ca842910 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6504 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5124 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 5064 -prefMapHandle 5060 -prefsLen 33416 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c940e8e0-6a4b-4b99-bff8-a7fea8b330be} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232d7674310 utility MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

chrome.exe (PID: 816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1820,i,13358357324059123843,13037745772184586689,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cmd.exe (PID: 8432 cmdline: "C:\Windows\system32\cmd.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 8440 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

regsvr32.exe (PID: 8744 cmdline: regsvr32 /s mscoree.dll MD5: B0C2FA35D14A9FAD919E99D9D75E1B9E)

rundll32.exe (PID: 8824 cmdline: rundll32 mscoree.dll MD5: EF3179D498793BF4234F708D3BE28633)

cleanup

Sigma Signatures

Sigma detected: Scripting/CommandLine Process Spawned Regsvr32

Source: Process started

Author: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: regsvr32 /s mscoree.dll, CommandLine: regsvr32 /s mscoree.dll, CommandLine|base64offset|contains: ,, Image: C:\Windows\System32\regsvr32.exe, NewProcessName: C:\Windows\System32\regsvr32.exe, OriginalFileName: C:\Windows\System32\regsvr32.exe, ParentCommandLine: "C:\Windows\system32\cmd.exe" , ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 8432, ParentProcessName: cmd.exe, ProcessCommandLine: regsvr32 /s mscoree.dll, ProcessId: 8744, ProcessName: regsvr32.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: mscoree.dll	Virustotal: Detection: 27%			Perma Link
Source: mscoree.dll	ReversingLabs: Detection: 25%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Source: C:\Windows\System32\regsvr32.exe

File opened: C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_88e266cb2fac7c0d\MSVCR80.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.17:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.17:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.17:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.91:443 -> 192.168.2.17:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.17:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.17:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.17:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49788 version: TLS 1.2

Source: mscoree.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: rsaenh.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: xWindows.Security.Integrity.pdb source: firefox.exe, 00000008.00000003.1446193089.00000232E9A21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1442584524.00000232DB8DE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: wshbth.pdbGCTL source: firefox.exe, 00000008.00000003.1476844499.00000232DA7C1000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: winsta.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: ktmw32.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: WscApi.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: NapiNSP.pdb source: firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1466257652.00000232DA7C8000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1461792347.00000232DA7BA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: userenv.pdbpg0+ source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: msvcrt.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: xWindows.StateRepositoryPS.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8DE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\a01\_work\12\s\\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb source: firefox.exe, 00000008.00000003.1410426341.00000232E23E8000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8WinTypes.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: webauthn.pdbGCTL source: firefox.exe, 00000008.00000003.1464694775.00000232E9B01000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: xul.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: nssckbi.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: winnsi.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: dcomp.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: cryptsp.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8dhcpcsvc6.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8softokn3.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb source: firefox.exe, 00000008.00000003.1411408414.00000232E23A9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: CLBCatQ.pdb source: firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: urlmon.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8twinapi.appcore.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\a01\_work\12\s\\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb source: firefox.exe, 00000008.00000003.1410426341.00000232E23E8000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8kernelbase.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8F4000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: userenv.pdbdate_added source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: netprofm.pdb source: firefox.exe, 00000008.00000003.1470794951.00000232DA7BB000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\a01\_work\12\s\\binaries\amd64ret\bin\amd64\\msvcp140.amd64.pdb source: firefox.exe, 00000008.00000003.1410426341.00000232E23E8000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8CoreMessaging.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: win32u.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: dwmapi.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: srvcli.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: imm32.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: freebl3.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: webauthn.pdb source: firefox.exe, 00000008.00000003.1464694775.00000232E9B01000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\msvcp140.amd64.pdb source: firefox.exe, 00000008.00000003.1411408414.00000232E23A9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: mswsock.pdb source: firefox.exe, 00000008.00000003.1408426665.00000232E9750000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8gkcodecs.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8iphlpapi.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8ExplorerFrame.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: nsi.pdb source: firefox.exe, 00000008.00000003.1407239513.00000232E97A2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1406338392.00000232E9A41000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: winmm.pdb source: firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb source: firefox.exe, 00000008.00000003.1411408414.00000232E23A9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8osclientcerts.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8CoreUIComponents.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8cfgmgr32.pdb source: firefox.exe, 00000008.00000003.1442044161.00000232DBA42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: msasn1.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: DWrite.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: combase.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8iertutil.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8dhcpcsvc.pdb source: firefox.exe, 00000008.00000003.1442044161.00000232DBA42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8msvcp140.amd64.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: pnrpnsp.pdbUGP source: firefox.exe, 00000008.00000003.1476844499.00000232DA7C1000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ncrypt.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8webauthn.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: pnrpnsp.pdb@#t source: firefox.exe, 00000008.00000003.1446769858.00000232E972E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8powrprof.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8ColorAdapterClient.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8MMDevAPI.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: wininet.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: UMPDC.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8kernel32.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1443478715.00000232DB87E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: rpcrt4.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8TextInputFramework.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: pnrpnsp.pdb source: firefox.exe, 00000008.00000003.1446769858.00000232E972E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1476844499.00000232DA7C1000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wshbth.pdb source: firefox.exe, 00000008.00000003.1446769858.00000232E972E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1476844499.00000232DA7C1000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 8InputHost.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8ucrtbase.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8F4000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: xOneCoreUAPCommonProxyStub.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8DE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: mswsock.pdb` source: firefox.exe, 00000008.00000003.1408426665.00000232E9750000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8audioses.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8Bcp47mrm.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8netutils.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: sspicli.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8rasadhlp.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8Bcp47Langs.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8taskschd.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8wtsapi32.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: NapiNSP.pdbUGP source: firefox.exe, 00000008.00000003.1466257652.00000232DA7C8000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1461792347.00000232DA7BA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: dnsapi.pdb source: firefox.exe, 00000008.00000003.1407239513.00000232E97A2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8Windows.UI.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: nlaapi.pdb source: firefox.exe, 00000008.00000003.1408426665.00000232E9750000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1446769858.00000232E972E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8fwpuclnt.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: winhttp.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: msimg32.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: ntasn1.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: devobj.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d3d11.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: netprofm.pdbUGP source: firefox.exe, 00000008.00000003.1470794951.00000232DA7BB000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 8OnDemandConnRouteHelper.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: dbghelp.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8netprofm.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: profapi.pdb source: firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: gdi32.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: avrt.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8Windows.Globalization.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: sechost.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8directmanipulation.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8setupapi.pdb source: firefox.exe, 00000008.00000003.1442044161.00000232DBA42000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8vcruntime140_1.amd64.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: propsys.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8lgpllibs.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: z:\task_1551543573\build\openh264\gmpopenh264.pdb source: firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr
Source:	Binary string: 8vcruntime140.amd64.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: winrnr.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A41000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: msctf.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: version.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: dbgcore.pdb source: firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: mscms.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: user32.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: twinapi.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: z:\task_1551543573\build\openh264\gmpopenh264.pdbV source: firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr
Source:	Binary string: 8DataExchange.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8wintrust.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: psapi.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8WindowManagementAPI.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: dxgi.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8npmproxy.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8linkinfo.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8Windows.UI.Immersive.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 252MB

Source: unknown

Network traffic detected: DNS query count 31

Source: global traffic

TCP traffic: 192.168.2.17:49723 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 34.117.188.166 34.117.188.166
Source: Joe Sandbox View	IP Address: 34.149.100.209 34.149.100.209
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCNy9zQEIkcrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCNy9zQEIkcrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 00000008.00000003.1367845570.00000232DBBB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7649000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1793276367.00000232D7646000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1794751871.00000232D69EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1895246201.00000232D69ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1362391261.00000232E433A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1360380804.00000232E48CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1362391261.00000232E433A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1360380804.00000232E48CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7649000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1497341730.00000232DAFCE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1364249906.00000232E24A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7637000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1793475696.00000232D7632000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1362391261.00000232E433A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1360380804.00000232E48CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/Z equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1362391261.00000232E433A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1360380804.00000232E48CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1362922056.00000232E41D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1408699244.00000232E41E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1362922056.00000232E41D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1408699244.00000232E41E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1362922056.00000232E41D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1408699244.00000232E41E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/Z equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1401793795.00000232E276D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1367845570.00000232DBBB3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1363653576.00000232E276D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: moz-extension://0ab8ff70-1ab5-4e03-80c2-ce7320587470/injections/js/bug1842437-www.youtube.com-performance-now-precision.js equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1600213633.00000232DBC6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1892437728.00000232D7649000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comZ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000008.00000003.1593629740.00000232DBA1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1892437728.00000232D7637000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1439879869.00000232DBC6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com- equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.comZ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000008.00000003.1497341730.00000232DAFAA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1497341730.00000232DAF63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1351828507.00000232E82D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: services.addons.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: normandy.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: normandy-cdn.services.mozilla.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 905sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded;charset=UTF-8Accept: */*Origin: chrome-untrusted://new-tab-pageX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: firefox.exe, 00000008.00000003.1784964371.00000232D8687000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: firefox.exe, 00000008.00000003.1399278120.00000232DA791000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredI
Source: firefox.exe, 00000008.00000003.1461792347.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1456141608.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1458743967.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1399278120.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: firefox.exe, 00000008.00000003.1461792347.00000232DA79B000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1458743967.00000232DA791000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1399278120.00000232DA791000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1456141608.00000232DA798000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1392367446.00000232DA795000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1461792347.00000232DA791000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: firefox.exe, 00000008.00000003.1399278120.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicgb
Source: firefox.exe, 00000008.00000003.1657153940.00000232DBCC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-android-aarch64-42954cf0fe8a2bdc97fdc180462a3eaefceb035f.zi
Source: firefox.exe, 00000008.00000003.1657153940.00000232DBCC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-android-arm-42954cf0fe8a2bdc97fdc180462a3eaefceb035f.zip
Source: firefox.exe, 00000008.00000003.1657153940.00000232DBCC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-android-x86-42954cf0fe8a2bdc97fdc180462a3eaefceb035f.zip
Source: firefox.exe, 00000008.00000003.1657153940.00000232DBCC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-android-x86_64-42954cf0fe8a2bdc97fdc180462a3eaefceb035f.zip
Source: firefox.exe, 00000008.00000003.1657153940.00000232DBCC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-linux32-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
Source: firefox.exe, 00000008.00000003.1657153940.00000232DBCC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
Source: firefox.exe, 00000008.00000003.1657153940.00000232DBCC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-macosx64-2e1774ab6dc6c43debb0b5b628bdf122a391d521-2.zip
Source: firefox.exe, 00000008.00000003.1657153940.00000232DBCC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-macosx64-aarch64-2e1774ab6dc6c43debb0b5b628bdf122a391d521-2
Source: firefox.exe, 00000008.00000003.1657153940.00000232DBCC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-win32-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
Source: firefox.exe, 00000008.00000003.1781984102.00000232D913A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1657153940.00000232DBCC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
Source: firefox.exe, 00000008.00000003.1657153940.00000232DBCC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ciscobinary.openh264.org/openh264-win64-aarch64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
Source: firefox.exe, 00000008.00000003.1403197057.00000232E45BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: firefox.exe, 00000008.00000003.1643163162.00000232E23AA000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: firefox.exe, 00000008.00000003.1399278120.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.d
Source: firefox.exe, 00000008.00000003.1461792347.00000232DA79B000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1392367446.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1383874059.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1381827865.00000232DA791000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1378441104.00000232DA7A9000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1399278120.00000232DA791000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1456141608.00000232DA798000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1392367446.00000232DA795000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.di
Source: firefox.exe, 00000008.00000003.1461792347.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1456141608.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1458743967.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1399278120.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: firefox.exe, 00000008.00000003.1461792347.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1393337013.00000232DA78D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1456141608.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1458743967.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1399278120.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000008.00000003.1401543036.00000232E499C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1396800390.00000232E41B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1796246599.00000232D699D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1494162907.00000232E235C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1409536246.00000232E41BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1784384463.00000232D86D6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1896436249.00000232D69B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1794536819.00000232D69F9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1644288519.00000232E2310000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1784384463.00000232D86CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000008.00000003.1802258686.00000232D604D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/
Source: firefox.exe, 00000008.00000003.1790468171.00000232D7688000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000008.00000003.1595246393.00000232DB775000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 00000008.00000003.1401793795.00000232E2758000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 00000008.00000003.1903131013.00000232D163B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://en.w
Source: firefox.exe, 00000008.00000003.1799566738.00000232D608C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 00000008.00000003.1801622386.00000232D6081000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times$
Source: firefox.exe, 00000008.00000003.1799566738.00000232D608C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 00000008.00000003.1801622386.00000232D6081000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 00000008.00000003.1799566738.00000232D608C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#-
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 00000008.00000003.1619219736.00003AB223403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1889416368.00000232DBAE9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 00000008.00000003.1619219736.00003AB223403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#
Source: firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/0
Source: firefox.exe, 00000008.00000003.1428133162.00000232DC9A6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1261525173.00000232E47D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1295084414.00000232E86C4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1437575989.00000232DBC8D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1506102934.00000232D90AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1606967869.00000232DCB3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1445642121.00000232DB5E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1458741786.00000232D80D6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1428133162.00000232DC99C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1334987548.00000232D7D78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1427262828.00000232DCA62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1421006107.00000232DD732000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1295084414.00000232E8686000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1890959435.00000232DB5E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1301219113.00000232DB4C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1228696225.00000232D7F89000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1872822699.00000232E2554000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1296668176.00000232E8635000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1262279554.00000232E4786000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1418732843.00000232DD7DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1788115893.00000232D7E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: firefox.exe, 00000008.00000003.1608184417.00002483B7703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1619219736.00003AB223403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/Z
Source: firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: firefox.exe, 00000008.00000003.1461792347.00000232DA79B000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1458743967.00000232DA791000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1399278120.00000232DA791000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1456141608.00000232DA798000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1392367446.00000232DA795000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1461792347.00000232DA791000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: firefox.exe, 00000008.00000003.1461792347.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1456141608.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1458743967.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1399278120.00000232DA791000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1399278120.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 00000008.00000003.1643163162.00000232E23AA000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: firefox.exe, 00000008.00000003.1403197057.00000232E45BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: firefox.exe, 00000008.00000003.1403197057.00000232E45BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: chromecache_126.11.dr	String found in binary or memory: http://www.broofa.com
Source: firefox.exe, 00000008.00000003.1841979800.00000232D163C000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1843742981.00000232D1636000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers
Source: firefox.exe, 00000008.00000003.1840002717.00000232D163C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/
Source: firefox.exe, 00000008.00000003.1840002717.00000232D163C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/c
Source: firefox.exe, 00000008.00000003.1845406866.00000232D1636000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1847043122.00000232D1636000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1843742981.00000232D1636000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designersfet
Source: firefox.exe, 00000008.00000003.1841979800.00000232D163C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designersp
Source: firefox.exe, 00000008.00000003.1403197057.00000232E45BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 00000008.00000003.1399278120.00000232DA791000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.TQ
Source: firefox.exe, 00000008.00000003.1643163162.00000232E23AA000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: http://www.mozilla.com0
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 00000008.00000003.1788115893.00000232D7E39000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1426819896.00000232DCA94000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1892437728.00000232D7697000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: mozilla-temp-41.8.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 00000008.00000003.1436641362.00000232DBCEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://MD8.mozilla.org/1/m
Source: firefox.exe, 00000008.00000003.1216390414.00000232D8900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216710833.00000232D8005000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 00000008.00000003.1600213633.00000232DBC68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 00000008.00000003.1405889398.00000232E9A9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 00000008.00000003.1788115893.00000232D7E39000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 00000008.00000003.1361399460.00000232E435D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comK
Source: chromecache_129.11.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_129.11.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/enhancer-for-youtube/
Source: firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/facebook-container/
Source: firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/reddit-enhancement-suite/
Source: firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/to-google-translate/
Source: firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/wikipedia-context-menu-search/
Source: firefox.exe, 00000008.00000003.1279534846.00000232DB6BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4040738/cookie_autodelete-3.8.2.xpi
Source: firefox.exe, 00000008.00000003.1279534846.00000232DB6BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4129240/privacy_badger17-2023.6.23.xpi
Source: firefox.exe, 00000008.00000003.1279534846.00000232DB6BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4141092/facebook_container-2.3.11.xpi
Source: firefox.exe, 00000008.00000003.1279534846.00000232DB6BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/506/506646-64.png?modified=mcrushed
Source: firefox.exe, 00000008.00000003.1279534846.00000232DB6BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/784/784287-64.png?modified=mcrushed
Source: firefox.exe, 00000008.00000003.1279534846.00000232DB6BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/954/954390-64.png?modified=97d4c956
Source: firefox.exe, 00000008.00000003.1364249906.00000232E24F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads-us.rd.linksynergy.com/as.php
Source: firefox.exe, 00000008.00000003.1364249906.00000232E24CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1497341730.00000232DAFAA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1497341730.00000232DAF63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.comZ
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: chromecache_129.11.dr, chromecache_126.11.dr	String found in binary or memory: https://apis.google.com
Source: firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://app.adjust.com/167k4ih?campaign=firefox-desktop&adgroup=pb&creative=focus-omc172&redirect=ht
Source: firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://app.adjust.com/a8bxj8j?campaign=firefox-desktop&adgroup=pb&creative=focus-omc172&redirect=ht
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 00000008.00000003.1433118400.00000232DC589000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1637796074.00000232DB8E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 00000008.00000003.1454784732.00000232DB2A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 00000008.00000003.1594806095.00000232DB7E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1668317324.00000232DB7E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release/Win
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 00000008.00000003.1594806095.00000232DB7E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1668317324.00000232DB7E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/re
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000A.00000002.2334391976.000001D98CBC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C489E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2350572570.000002A775705000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.8.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&ci=1696582852750.12791&key=1696582852400500
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000A.00000002.2334391976.000001D98CBC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C489E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2350572570.000002A775705000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.8.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&ci=1696582852750.12791&key=1696582852400500002.1&cta
Source: firefox.exe, 00000008.00000003.1260053833.00000232DC169000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 00000008.00000003.1302460195.00000232DB46F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1189266
Source: firefox.exe, 00000008.00000003.1302460195.00000232DB46F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1193802
Source: firefox.exe, 00000008.00000003.1302460195.00000232DB469000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1303173449.00000232DB47F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1302460195.00000232DB454000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1207993
Source: firefox.exe, 00000008.00000003.1302460195.00000232DB454000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1266220
Source: firefox.exe, 00000008.00000003.1302460195.00000232DB46F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1283601
Source: firefox.exe, 00000008.00000003.1302460195.00000232DB46F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1302460195.00000232DB454000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1678448
Source: firefox.exe, 00000008.00000003.1295084414.00000232E8686000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1694699#c21
Source: firefox.exe, 00000008.00000003.1302460195.00000232DB46F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=792480
Source: firefox.exe, 00000008.00000003.1302460195.00000232DB469000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1302460195.00000232DB454000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=809550
Source: firefox.exe, 00000008.00000003.1303173449.00000232DB47F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1302460195.00000232DB454000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=840161
Source: chromecache_129.11.dr	String found in binary or memory: https://clients6.google.com
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 00000008.00000003.1216390414.00000232D8900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216710833.00000232D8005000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000008.00000003.1594557981.00000232DB89E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1443382961.00000232DB89E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1658808215.00000232DB89E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 00000008.00000003.1396800390.00000232E4180000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1545709181.00000232DBC52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1440470966.00000232DBC50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: chromecache_129.11.dr	String found in binary or memory: https://content.googleapis.com
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000A.00000002.2334391976.000001D98CBC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C489E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2350572570.000002A775705000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.8.dr	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000A.00000002.2334391976.000001D98CBC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C489E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2350572570.000002A775705000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.8.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 00000008.00000003.1433959419.00000232DC162000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1656740117.00000232DC162000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 00000008.00000003.1433959419.00000232DC162000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 00000008.00000003.1777198693.00000232DB533000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 00000008.00000003.1331447733.00000232DC255000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1446193089.00000232E9A21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1603978040.00000232E9A21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://datastudio.google.com/embed/reporting/
Source: firefox.exe, 00000008.00000003.1304047602.00000232E85B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Mozilla/Tech/XPCOM/Reference/Interface/nsIEffectiveTLDServi
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: chromecache_129.11.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: firefox.exe, 00000008.00000003.1216390414.00000232D8900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1296668176.00000232E8635000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216710833.00000232D8005000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1415679268.00000232E2317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 00000008.00000003.1402987858.00000232E45C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000008.00000003.1403197057.00000232E45BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 00000008.00000003.1403197057.00000232E45BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 00000008.00000003.1402987858.00000232E45C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000014.00000002.2335368150.000002A775413000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000008.00000003.1266871731.00000232DBBBA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1279534846.00000232DB6B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 00000008.00000003.1266871731.00000232DBBBA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 00000008.00000003.1279534846.00000232DB6B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/d8e772fe-4909-4f05-9f9
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 00000008.00000003.1658166407.00000232DBAFD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1592115960.00000232DBAFD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1440929599.00000232DBAFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com
Source: firefox.exe, 00000008.00000003.1440985675.00000232DBACB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/
Source: firefox.exe, 00000008.00000003.1595442483.00000232DB771000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/
Source: firefox.exe, 00000008.00000003.1733055603.00000232DC52D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1643853960.00000232E2341000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1728834142.00000232DC52D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1653453754.00000232DC9C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?colle
Source: chromecache_126.11.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_126.11.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_126.11.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_126.11.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 00000014.00000002.2335368150.000002A775413000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000014.00000002.2335368150.000002A7754C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000014.00000002.2335368150.000002A7754C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000000E.00000002.2337822692.0000022C4892F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2335368150.000002A775430000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000008.00000003.1794355498.00000232D7607000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 00000008.00000003.1794355498.00000232D7607000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 00000014.00000002.2335368150.000002A7754C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000008.00000003.1361399460.00000232E435D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 00000008.00000003.1452647683.00000232DB555000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 00000014.00000002.2335368150.000002A7754C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000008.00000003.1361399460.00000232E435D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 00000008.00000003.1361399460.00000232E435D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 00000008.00000003.1361399460.00000232E435D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 00000008.00000003.1262279554.00000232E4786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 00000008.00000003.1262279554.00000232E4786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 00000008.00000003.1216390414.00000232D8900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216710833.00000232D8005000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000008.00000003.1792386593.00000232D764D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: firefox.exe, 00000008.00000003.1361399460.00000232E435D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 00000008.00000003.1608184417.00002483B7703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1415483381.00000232E2330000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ib.absa.co.za/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 00000008.00000003.1432720288.00000232DC5B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/apps/oldsyncS
Source: firefox.exe, 00000008.00000003.1413341694.00000232E2346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/apps/relay
Source: firefox.exe, 00000008.00000003.1432720288.00000232DC5B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/cmd/H
Source: firefox.exe, 00000008.00000003.1432720288.00000232DC5B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/cmd/HCX
Source: firefox.exe, 00000008.00000003.1432720288.00000232DC5B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/ids/ecosystem_telemetryU
Source: firefox.exe, 00000008.00000003.1432720288.00000232DC5B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/ids/ecosystem_telemetryUFj
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: prefs-1.js.8.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4CLY1pDY4pbW4CbWfpbY7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 00000008.00000003.1895440315.00000232D69DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 00000014.00000002.2335368150.000002A7754F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000008.00000003.1432312550.00000232DC5E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/firefox-desktop/events/1/631c6b63-99a7-4485-b1a7-2685e
Source: firefox.exe, 00000008.00000003.1433959419.00000232DC19A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/firefox-desktop/metrics/1/08625f36-e492-4a5c-9db8-0392
Source: firefox.exe, 00000008.00000003.1432312550.00000232DC5E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/firefox-desktop/newtab/1/4cafb3d9-e253-4f75-9398-9cd59
Source: firefox.exe, 00000008.00000003.1410426341.00000232E23E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1411408414.00000232E23A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/messaging-system/undesired-events/1/1b3453e2-6c53-4930
Source: firefox.exe, 00000008.00000003.1410426341.00000232E23E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1411408414.00000232E23A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/messaging-system/undesired-events/1/1d2ce3f0-e36a-4d36
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7671000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/telemetry/062597e9-9a8b-4446-9d2b-dd02a663ab26/main/Fi
Source: firefox.exe, 00000008.00000003.1888452692.00000232DC52D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1892437728.00000232D7671000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/telemetry/26c49559-dec9-4c72-8582-645b4ea2da18/first-s
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7671000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1892437728.00000232D766F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/telemetry/3235c558-7b16-4bc9-a13b-cc8eaf418842/health/
Source: firefox.exe, 00000008.00000003.1888452692.00000232DC52D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1892437728.00000232D7671000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/telemetry/5a2df80a-6d47-4acc-8154-21c869393df7/new-pro
Source: firefox.exe, 00000008.00000003.1888452692.00000232DC52D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1892437728.00000232D7671000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/telemetry/86f695bb-32b2-4126-a3e7-4f639d9cf7eb/event/F
Source: firefox.exe, 00000008.00000003.1888452692.00000232DC52D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1892437728.00000232D7671000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/telemetry/95422764-c580-41a0-9f20-df979876d1c4/main/Fi
Source: firefox.exe, 00000008.00000003.1888452692.00000232DC52D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1892437728.00000232D7671000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit/telemetry/98f36e5f-60e2-40fa-9fb9-37eb33dd4417/health/
Source: firefox.exe, 00000008.00000003.1361399460.00000232E435D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 00000008.00000003.1440985675.00000232DBA59000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema.
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema./
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/
Source: firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/=
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 00000008.00000003.1428133162.00000232DC9A6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1594806095.00000232DB7E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000008.00000003.1600213633.00000232DBC68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 00000008.00000003.1600213633.00000232DBC68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 00000008.00000003.1331447733.00000232DC255000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1446193089.00000232E9A21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1603978040.00000232E9A21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lookerstudio.google.com/embed/reporting/
Source: firefox.exe, 00000008.00000003.1402987858.00000232E45C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000008.00000003.1402987858.00000232E45C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 00000008.00000003.1403197057.00000232E45BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 00000008.00000003.1402987858.00000232E45C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000008.00000003.1403197057.00000232E45BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 0000000A.00000002.2334391976.000001D98CB72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C48981000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2335368150.000002A775487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 00000008.00000003.1796246599.00000232D6966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net
Source: firefox.exe, 00000008.00000003.1730162847.00000232DBC35000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 00000008.00000003.1594806095.00000232DB7E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 00000008.00000003.1402987858.00000232E45C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: chromecache_126.11.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: chromecache_129.11.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_129.11.dr	String found in binary or memory: https://plus.googleapis.com
Source: firefox.exe, 00000008.00000003.1402987858.00000232E45C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000008.00000003.1403197057.00000232E45BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 00000008.00000003.1504721683.00000232D9194000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 00000008.00000003.1895440315.00000232D69E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://push.services.mozilla.com/
Source: firefox.exe, 00000008.00000003.1675340960.00000232DB753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2557.0-win-x64.zip
Source: firefox.exe, 00000008.00000003.1361399460.00000232E435D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7671000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1792386593.00000232D764D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2&
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 00000008.00000003.1410426341.00000232E23E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 00000008.00000003.1802258686.00000232D604D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com
Source: firefox.exe, 00000008.00000003.1798389849.00000232D61FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7671000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1792386593.00000232D764D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7671000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1792386593.00000232D764D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 00000008.00000003.1216710833.00000232D8005000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000008.00000003.1304047602.00000232E85B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 00000008.00000003.1444385233.00000232DB7C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 00000008.00000003.1350415363.00000232E97B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1446578687.00000232E976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com
Source: firefox.exe, 00000008.00000003.1636965717.00000232DBACB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000008.00000003.1394382635.00000232E499A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000008.00000003.1453706886.00000232DB520000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000008.00000003.1453706886.00000232DB520000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 00000008.00000003.1496484491.00000232DB562000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1776781228.00000232DB562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 00000008.00000003.1453206804.00000232DB53E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1424045637.00000232DCC1C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C48912000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2335368150.000002A775413000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000014.00000002.2335368150.000002A775413000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/CN=The
Source: firefox.exe, 00000008.00000003.1453206804.00000232DB53E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1439879869.00000232DBC6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 00000008.00000003.1361399460.00000232E435D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1732511265.00000232DD88F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1416251098.00000232DD88F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C489C4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2335368150.000002A7754F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000008.00000003.1364249906.00000232E24CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000008.00000003.1364249906.00000232E24CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1497341730.00000232DAFAA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1497341730.00000232DAF63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 00000008.00000003.1424860853.00000232DCB6B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1595442483.00000232DB753000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1445128744.00000232DB753000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1675340960.00000232DB753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 00000008.00000003.1394923284.00000232E489C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1360380804.00000232E489C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/firefox-relay-integration
Source: firefox.exe, 00000008.00000003.1594806095.00000232DB7E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1410426341.00000232E23E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1444034457.00000232DB7E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1418626789.00000232DD816000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1668317324.00000232DB7E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1363751340.00000232E2756000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1504375837.00000232D91BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1411408414.00000232E23A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1401793795.00000232E2758000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: firefox.exe, 00000008.00000003.1363822349.00000232E273B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1405889398.00000232E9A91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1405889398.00000232E9A7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000008.00000003.1421643865.00000232DCCDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: firefox.exe, 00000008.00000003.1405889398.00000232E9A91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1405889398.00000232E9A7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefox
Source: firefox.exe, 00000008.00000003.1363822349.00000232E273B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.iuh3GyBOlec2
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 00000008.00000003.1360380804.00000232E48CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/Z
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7637000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1793475696.00000232D7632000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://watch.sling.com/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 00000008.00000003.1361399460.00000232E435D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: chromecache_129.11.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 00000008.00000003.1360380804.00000232E48CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000A.00000002.2334391976.000001D98CBC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C489E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2350572570.000002A775705000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.8.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_31b94b0303af81c500b60b222c3804f084d41b52e86e0f54
Source: firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/Z
Source: firefox.exe, 00000008.00000003.1675340960.00000232DB771000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1445128744.00000232DB76A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1415679268.00000232E230F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216390414.00000232D8900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1595442483.00000232DB771000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1296668176.00000232E8635000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1644288519.00000232E2310000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216710833.00000232D8005000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 00000008.00000003.1458743967.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com
Source: firefox.exe, 00000008.00000003.1461792347.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1393337013.00000232DA78D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1456141608.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1399278120.00000232DA791000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1399278120.00000232DA7AB000.00000004.00000020.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: firefox.exe, 00000008.00000003.1261249956.00000232E47B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000008.00000003.1216390414.00000232D8900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216710833.00000232D8005000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: firefox.exe, 00000008.00000003.1675340960.00000232DB771000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1445128744.00000232DB76A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1415679268.00000232E230F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216390414.00000232D8900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1595442483.00000232DB771000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1296668176.00000232E8635000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1644288519.00000232E2310000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216710833.00000232D8005000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000008.00000003.1728130633.00000232DC5E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: chromecache_129.11.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_129.11.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: chromecache_126.11.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_126.11.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_126.11.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 00000008.00000003.1675340960.00000232DB771000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1445128744.00000232DB76A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1595442483.00000232DB771000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mobilesuica.com/
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7641000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 00000008.00000003.1439879869.00000232DBC68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1437575989.00000232DBCA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: firefox.exe, 00000008.00000003.1405889398.00000232E9A91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1405889398.00000232E9A7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: firefox.exe, 00000008.00000003.1363822349.00000232E273B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.2Fdc4MsAZL1e
Source: firefox.exe, 00000008.00000003.1266871731.00000232DBBBA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: firefox.exe, 00000008.00000003.1405889398.00000232E9A91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1405889398.00000232E9A7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: firefox.exe, 00000008.00000003.1363822349.00000232E273B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.umHoODpuW91L
Source: firefox.exe, 00000008.00000003.1394923284.00000232E489C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1360380804.00000232E489C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/about/legal/terms/subscription-services/
Source: firefox.exe, 00000008.00000003.1440929599.00000232DBAFD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1494637534.00000232DC5EA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1853919043.00000232DC5EE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1432312550.00000232DC5E5000.00000004.00000800.00020000.00000000.sdmp, targeting.snapshot.json.tmp.8.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: firefox.exe, 00000008.00000003.1363822349.00000232E273B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: firefox.exe, 00000008.00000003.1394923284.00000232E489C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1360380804.00000232E489C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/subscription-services/
Source: firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/
Source: firefox.exe, 00000008.00000003.1363822349.00000232E273B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1410426341.00000232E23E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1405889398.00000232E9A91000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1405889398.00000232E9A7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 00000008.00000003.1279534846.00000232DB6BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1574440125.00000232DB3C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/mobile/get-app/?utm_medium=firefox-desktop&utm_source=onboarding-mod
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 00000008.00000003.1802258686.00000232D604D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000A.00000002.2334391976.000001D98CBC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C489C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2335368150.000002A7754F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000008.00000003.1794355498.00000232D7607000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000008.00000003.1802258686.00000232D604D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/J
Source: firefox.exe, 0000000E.00000002.2337822692.0000022C489C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/N:
Source: firefox.exe, 00000008.00000003.1495002562.00000232DC122000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: firefox.exe, 00000008.00000003.1363822349.00000232E273B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000008.00000003.1281563149.00000232DB692000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1600213633.00000232DBC68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1326945651.00000232DB692000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 00000008.00000003.1798389849.00000232D61E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 00000008.00000003.1360380804.00000232E48CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/Z
Source: firefox.exe, 00000008.00000003.1892437728.00000232D7637000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1793475696.00000232D7632000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sling.com/
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000A.00000002.2334391976.000001D98CBC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C489E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2350572570.000002A775705000.00000004.00000800.00020000.00000000.sdmp, prefs-1.js.8.dr	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: firefox.exe, 00000008.00000003.1788115893.00000232D7E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tiktok.com/
Source: firefox.exe, 00000008.00000003.1360380804.00000232E48CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C4890A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2335368150.000002A77540C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/Z
Source: firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.17:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.17:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.17:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.91:443 -> 192.168.2.17:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.17:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.17:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.17:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.17:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.17:49788 version: TLS 1.2

Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 14_2_0000022C488F83F7 NtQuerySystemInformation,		14_2_0000022C488F83F7
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 14_2_0000022C491F97F2 NtQuerySystemInformation,		14_2_0000022C491F97F2

Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 14_2_0000022C488F83F7	14_2_0000022C488F83F7
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 14_2_0000022C491F97F2	14_2_0000022C491F97F2
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 14_2_0000022C491F9F1C	14_2_0000022C491F9F1C
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Code function: 14_2_0000022C491F9832	14_2_0000022C491F9832

Source: classification engine

Classification label: mal52.winDLL@43/52@74/15

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File created: C:\Users\user\AppData\Local\Mozilla\Firefox\SkeletonUILock-c388d246

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4956:120:WilError_03

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File created: C:\Users\user\AppData\Local\Temp\firefox

Jump to behavior

Source: mscoree.dll

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Windows\System32\loaddll64.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\mscoree.dll",#1

Source: firefox.exe, 00000008.00000003.1357956149.00000232E7FB5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1453706886.00000232DB520000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT * FROM events WHERE timestamp BETWEEN date(:dateFrom) AND date(:dateTo);
Source: firefox.exe, 00000008.00000003.1357956149.00000232E7FB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE events (id INTEGER PRIMARY KEY, type INTEGER NOT NULL, count INTEGER NOT NULL, timestamp DATE );
Source: firefox.exe, 00000008.00000003.1357956149.00000232E7FB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: INSERT INTO events (type, count, timestamp) VALUES (:type, 1, date(:date));
Source: firefox.exe, 00000008.00000003.1357956149.00000232E7FB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT timestamp FROM events ORDER BY timestamp ASC LIMIT 1;;
Source: firefox.exe, 00000008.00000003.1440470966.00000232DBC48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT sum(count) FROM events;
Source: firefox.exe, 00000008.00000003.1357956149.00000232E7FB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT timestamp FROM events ORDER BY timestamp ASC LIMIT 1;;Fy6
Source: firefox.exe, 00000008.00000003.1357956149.00000232E7FB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: UPDATE events SET count = count + 1 WHERE id = :id;-
Source: firefox.exe, 00000008.00000003.1357956149.00000232E7FB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT sum(count) FROM events;9'
Source: firefox.exe, 00000008.00000003.1357956149.00000232E7FB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT sum(count) FROM events;9
Source: firefox.exe, 00000008.00000003.1357956149.00000232E7FB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT * FROM events WHERE type = :type AND timestamp = date(:date);

Source: mscoree.dll	Virustotal: Detection: 27%
Source: mscoree.dll	ReversingLabs: Detection: 25%

Source: unknown	Process created: C:\Windows\System32\loaddll64.exe loaddll64.exe "C:\Users\user\Desktop\mscoree.dll"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\mscoree.dll",#1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\mscoree.dll",#1
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2ad9795c-bfec-4a59-9af3-8c3376ad500c} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232ca86c510 socket
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1820,i,13358357324059123843,13037745772184586689,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3400 -parentBuildID 20230927232528 -prefsHandle 3224 -prefMapHandle 3220 -prefsLen 25337 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b1b12ce8-1418-4648-909e-d132dd7b09ac} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232ca842910 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5124 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 5064 -prefMapHandle 5060 -prefsLen 33416 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c940e8e0-6a4b-4b99-bff8-a7fea8b330be} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232d7674310 utility
Source: unknown	Process created: C:\Windows\System32\cmd.exe "C:\Windows\system32\cmd.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s mscoree.dll
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32 mscoree.dll
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\mscoree.dll",#1	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\mscoree.dll",#1	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe"	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2ad9795c-bfec-4a59-9af3-8c3376ad500c} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232ca86c510 socket	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3400 -parentBuildID 20230927232528 -prefsHandle 3224 -prefMapHandle 3220 -prefsLen 25337 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b1b12ce8-1418-4648-909e-d132dd7b09ac} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232ca842910 rdd	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5124 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 5064 -prefMapHandle 5060 -prefsLen 33416 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c940e8e0-6a4b-4b99-bff8-a7fea8b330be} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232d7674310 utility	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1820,i,13358357324059123843,13037745772184586689,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s mscoree.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32 mscoree.dll	Jump to behavior

Source: C:\Windows\System32\loaddll64.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Section loaded: libcrypto-3-x64.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Section loaded: libssl-3-x64.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: winbrand.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: version.dll	Jump to behavior

Source: Google Drive.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: mscoree.dll

Static PE information: Image base 0x180000000 > 0x60000000

Source: C:\Windows\System32\regsvr32.exe

File opened: C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_88e266cb2fac7c0d\MSVCR80.dll

Jump to behavior

Source: mscoree.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source: mscoree.dll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: rsaenh.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: xWindows.Security.Integrity.pdb source: firefox.exe, 00000008.00000003.1446193089.00000232E9A21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1442584524.00000232DB8DE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: wshbth.pdbGCTL source: firefox.exe, 00000008.00000003.1476844499.00000232DA7C1000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: winsta.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: ktmw32.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: WscApi.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: NapiNSP.pdb source: firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1466257652.00000232DA7C8000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1461792347.00000232DA7BA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: userenv.pdbpg0+ source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: msvcrt.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: xWindows.StateRepositoryPS.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8DE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\a01\_work\12\s\\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb source: firefox.exe, 00000008.00000003.1410426341.00000232E23E8000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8WinTypes.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: webauthn.pdbGCTL source: firefox.exe, 00000008.00000003.1464694775.00000232E9B01000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: xul.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: nssckbi.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: winnsi.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: dcomp.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: cryptsp.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8dhcpcsvc6.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8softokn3.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb source: firefox.exe, 00000008.00000003.1411408414.00000232E23A9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: CLBCatQ.pdb source: firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: urlmon.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8twinapi.appcore.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\a01\_work\12\s\\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb source: firefox.exe, 00000008.00000003.1410426341.00000232E23E8000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8kernelbase.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8F4000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: userenv.pdbdate_added source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: netprofm.pdb source: firefox.exe, 00000008.00000003.1470794951.00000232DA7BB000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\a01\_work\12\s\\binaries\amd64ret\bin\amd64\\msvcp140.amd64.pdb source: firefox.exe, 00000008.00000003.1410426341.00000232E23E8000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8CoreMessaging.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: win32u.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: dwmapi.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: srvcli.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: imm32.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: freebl3.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: webauthn.pdb source: firefox.exe, 00000008.00000003.1464694775.00000232E9B01000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\msvcp140.amd64.pdb source: firefox.exe, 00000008.00000003.1411408414.00000232E23A9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: mswsock.pdb source: firefox.exe, 00000008.00000003.1408426665.00000232E9750000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8gkcodecs.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8iphlpapi.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8ExplorerFrame.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: nsi.pdb source: firefox.exe, 00000008.00000003.1407239513.00000232E97A2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1406338392.00000232E9A41000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: winmm.pdb source: firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb source: firefox.exe, 00000008.00000003.1411408414.00000232E23A9000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8osclientcerts.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8CoreUIComponents.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8cfgmgr32.pdb source: firefox.exe, 00000008.00000003.1442044161.00000232DBA42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: msasn1.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: DWrite.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: combase.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8iertutil.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8dhcpcsvc.pdb source: firefox.exe, 00000008.00000003.1442044161.00000232DBA42000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8msvcp140.amd64.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: pnrpnsp.pdbUGP source: firefox.exe, 00000008.00000003.1476844499.00000232DA7C1000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ncrypt.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8webauthn.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: pnrpnsp.pdb@#t source: firefox.exe, 00000008.00000003.1446769858.00000232E972E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8powrprof.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8ColorAdapterClient.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8MMDevAPI.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: wininet.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: UMPDC.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8kernel32.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1443478715.00000232DB87E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: rpcrt4.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8TextInputFramework.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: pnrpnsp.pdb source: firefox.exe, 00000008.00000003.1446769858.00000232E972E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1476844499.00000232DA7C1000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wshbth.pdb source: firefox.exe, 00000008.00000003.1446769858.00000232E972E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1476844499.00000232DA7C1000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 8InputHost.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8ucrtbase.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8F4000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: xOneCoreUAPCommonProxyStub.pdb source: firefox.exe, 00000008.00000003.1442584524.00000232DB8DE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: mswsock.pdb` source: firefox.exe, 00000008.00000003.1408426665.00000232E9750000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8audioses.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8Bcp47mrm.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8netutils.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: sspicli.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8rasadhlp.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8Bcp47Langs.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8taskschd.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8wtsapi32.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: NapiNSP.pdbUGP source: firefox.exe, 00000008.00000003.1466257652.00000232DA7C8000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1461792347.00000232DA7BA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: dnsapi.pdb source: firefox.exe, 00000008.00000003.1407239513.00000232E97A2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8Windows.UI.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: nlaapi.pdb source: firefox.exe, 00000008.00000003.1408426665.00000232E9750000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1446769858.00000232E972E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8fwpuclnt.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: winhttp.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: msimg32.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: ntasn1.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: devobj.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d3d11.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: netprofm.pdbUGP source: firefox.exe, 00000008.00000003.1470794951.00000232DA7BB000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 8OnDemandConnRouteHelper.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: dbghelp.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8netprofm.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: profapi.pdb source: firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: gdi32.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: avrt.pdb source: firefox.exe, 00000008.00000003.1413341694.00000232E2359000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8Windows.Globalization.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: sechost.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8directmanipulation.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8setupapi.pdb source: firefox.exe, 00000008.00000003.1442044161.00000232DBA42000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8vcruntime140_1.amd64.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: propsys.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8lgpllibs.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: z:\task_1551543573\build\openh264\gmpopenh264.pdb source: firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr
Source:	Binary string: 8vcruntime140.amd64.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: winrnr.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A41000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: msctf.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: version.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: dbgcore.pdb source: firefox.exe, 00000008.00000003.1386977344.00000232E82A7000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: mscms.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: user32.pdb source: firefox.exe, 00000008.00000003.1394156024.00000232E7F74000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: twinapi.pdb source: firefox.exe, 00000008.00000003.1406338392.00000232E9A69000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: z:\task_1551543573\build\openh264\gmpopenh264.pdbV source: firefox.exe, 00000008.00000003.1665110808.00000232EA700000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr
Source:	Binary string: 8DataExchange.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA4E000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8wintrust.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: psapi.pdb source: firefox.exe, 00000008.00000003.1393179205.00000232E7FFE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8WindowManagementAPI.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: dxgi.pdb source: firefox.exe, 00000008.00000003.1385764616.00000232E9AC2000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8npmproxy.pdb source: firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8linkinfo.pdb source: firefox.exe, 00000008.00000003.1440985675.00000232DBA8A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 8Windows.UI.Immersive.pdb source: firefox.exe, 00000008.00000003.1441982310.00000232DBA4A000.00000004.00000800.00020000.00000000.sdmp

Source: mscoree.dll	Static PE information: section name: _RDATA
Source: gmpopenh264.dll.tmp.8.dr	Static PE information: section name: .rodata

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s mscoree.dll

Source: C:\Program Files\Mozilla Firefox\firefox.exe	File created: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll (copy)			Jump to dropped file
Source: C:\Program Files\Mozilla Firefox\firefox.exe	File created: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll.tmp			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

Code function: 14_2_0000022C488F83F7 rdtsc

14_2_0000022C488F83F7

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: firefox.exe, 0000000E.00000002.2349576382.0000022C48D90000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllU
Source: firefox.exe, 00000008.00000003.1209820421.00000232CC135000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllo
Source: firefox.exe, 0000000A.00000002.2326740362.000001D98C8FA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp
Source: firefox.exe, 0000000E.00000002.2349576382.0000022C48D90000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll%
Source: firefox.exe, 00000008.00000003.1209820421.00000232CC135000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000000A.00000002.2351697231.000001D98CE00000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2320164588.0000022C484DA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2349576382.0000022C48D90000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2348963784.000002A7755A0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 00000008.00000003.1798389849.00000232D61CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000A.00000002.2349155522.000001D98CD1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: firefox.exe, 00000014.00000002.2322033429.000002A77522A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW`KZu
Source: firefox.exe, 0000000A.00000002.2351697231.000001D98CE00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllRJ
Source: firefox.exe, 00000008.00000003.1209820421.00000232CC135000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000000A.00000002.2351697231.000001D98CE00000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2349576382.0000022C48D90000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\loaddll64.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

Code function: 14_2_0000022C488F83F7 rdtsc

14_2_0000022C488F83F7

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\mscoree.dll",#1	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s mscoree.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32 mscoree.dll	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	11 Process Injection	1 Masquerading	OS Credential Dumping	21 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	Security Account Manager	1 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 Regsvr32	NTDS	1 System Information Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Rundll32	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
mscoree.dll	28%	Virustotal		Browse
mscoree.dll	25%	ReversingLabs

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll (copy)	0%	ReversingLabs
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label	Link
http://crl3.di	0%	Avira URL Cloud	safe
http://exslt.org/dates-and-times$	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.0.35	true	false	high
example.org	96.7.128.192	true	false	high
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	high
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	high
twitter.com	104.244.42.129	true	false	high
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	high
shavar.prod.mozaws.net	44.233.129.8	true	false	high
services.addons.mozilla.org	151.101.193.91	true	false	high
plus.l.google.com	142.250.185.78	true	false	high
dyna.wikimedia.org	185.15.59.224	true	false	high
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	high
contile.services.mozilla.com	34.117.188.166	true	false	high
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	high
a19.dscg10.akamai.net	2.22.61.59	true	false	high
youtube-ui.l.google.com	142.250.185.142	true	false	high
play.google.com	142.250.185.142	true	false	high
reddit.map.fastly.net	151.101.1.140	true	false	high
ipv4only.arpa	192.0.0.170	true	false	high
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	high
push.services.mozilla.com	34.107.243.93	true	false	high
www.google.com	142.250.186.36	true	false	high
normandy-cdn.services.mozilla.com	35.201.103.21	true	false	high
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	high
www.reddit.com	unknown	unknown	false	high
spocs.getpocket.com	unknown	unknown	false	high
content-signature-2.cdn.mozilla.net	unknown	unknown	false	high
firefox.settings.services.mozilla.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
detectportal.firefox.com	unknown	unknown	false	high
normandy.cdn.mozilla.net	unknown	unknown	false	high
shavar.services.mozilla.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high
www.wikipedia.org	unknown	unknown	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 00000014.00000002.2335368150.000002A7754C8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl3.di	firefox.exe, 00000008.00000003.1461792347.00000232DA79B000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1392367446.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1383874059.00000232DA7A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1381827865.00000232DA791000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1378441104.00000232DA7A9000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1399278120.00000232DA791000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1456141608.00000232DA798000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1392367446.00000232DA795000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://detectportal.firefox.com/	firefox.exe, 00000008.00000003.1802258686.00000232D604D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://datastudio.google.com/embed/reporting/	firefox.exe, 00000008.00000003.1331447733.00000232DC255000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1446193089.00000232E9A21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1603978040.00000232E9A21000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.mozilla.com0	firefox.exe, 00000008.00000003.1643163162.00000232E23AA000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	false		high
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000000A.00000002.2334391976.000001D98CB72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C48981000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2335368150.000002A775487000.00000004.00000800.00020000.00000000.sdmp	false		high
https://json-schema.org/draft/2019-09/schema.	firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.fontbureau.com/designers	firefox.exe, 00000008.00000003.1841979800.00000232D163C000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1843742981.00000232D1636000.00000004.00000020.00020000.00000000.sdmp	false		high
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://spocs.getpocket.com/spocs	firefox.exe, 00000008.00000003.1453206804.00000232DB53E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1439879869.00000232DBC6D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://addons.mozilla.org/user-media/addon_icons/784/784287-64.png?modified=mcrushed	firefox.exe, 00000008.00000003.1279534846.00000232DB6BA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://screenshots.firefox.com	firefox.exe, 00000008.00000003.1892437728.00000232D7641000.00000004.00000800.00020000.00000000.sdmp	false		high
https://shavar.services.mozilla.com	firefox.exe, 00000008.00000003.1350415363.00000232E97B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1446578687.00000232E976E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://completion.amazon.com/search/complete?q=	firefox.exe, 00000008.00000003.1216390414.00000232D8900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216710833.00000232D8005000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.allizom.troppus.iuh3GyBOlec2	firefox.exe, 00000008.00000003.1363822349.00000232E273B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 00000008.00000003.1364249906.00000232E24CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1497341730.00000232DAFAA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1497341730.00000232DAF63000.00000004.00000800.00020000.00000000.sdmp	false		high
https://identity.mozilla.com/ids/ecosystem_telemetryU	firefox.exe, 00000008.00000003.1432720288.00000232DC5B6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://monitor.firefox.com/breach-details/	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
http://mozilla.org/#	firefox.exe, 00000008.00000003.1619219736.00003AB223403000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000008.00000003.1675340960.00000232DB771000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1445128744.00000232DB76A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1415679268.00000232E230F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216390414.00000232D8900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1595442483.00000232DB771000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1296668176.00000232E8635000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1644288519.00000232E2310000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216710833.00000232D8005000.00000004.00000800.00020000.00000000.sdmp	false		high
https://profiler.firefox.com/	firefox.exe, 00000008.00000003.1504721683.00000232D9194000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.msn.com	firefox.exe, 00000008.00000003.1281563149.00000232DB692000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1600213633.00000232DBC68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1326945651.00000232DB692000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/0	firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mozilla-services/screenshots	firefox.exe, 00000008.00000003.1216390414.00000232D8900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1216710833.00000232D8005000.00000004.00000800.00020000.00000000.sdmp	false		high
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
http://exslt.org/sets	firefox.exe, 00000008.00000003.1799566738.00000232D608C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://content-signature-2.cdn.mozilla.net/	firefox.exe, 00000008.00000003.1442299365.00000232DBA35000.00000004.00000800.00020000.00000000.sdmp	false		high
https://json-schema.org/draft/2020-12/schema/=	firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://app.adjust.com/167k4ih?campaign=firefox-desktop&adgroup=pb&creative=focus-omc172&redirect=ht	firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://api.accounts.firefox.com/v1	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
http://exslt.org/common	firefox.exe, 00000008.00000003.1799566738.00000232D608C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ok.ru/	firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/	firefox.exe, 00000008.00000003.1360380804.00000232E48CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	false		high
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://fpn.firefox.com	firefox.exe, 00000008.00000003.1892437728.00000232D7641000.00000004.00000800.00020000.00000000.sdmp	false		high
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.youtube.com/	firefox.exe, 00000008.00000003.1360380804.00000232E48CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C4890A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2335368150.000002A77540C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=1283601	firefox.exe, 00000008.00000003.1302460195.00000232DB46F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://MD8.mozilla.org/1/m	firefox.exe, 00000008.00000003.1436641362.00000232DBCEB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://plus.google.com	chromecache_129.11.dr	false		high
https://addons.mozilla.org/firefox/addon/to-google-translate/	firefox.exe, 00000008.00000003.1443758515.00000232DB865000.00000004.00000800.00020000.00000000.sdmp	false		high
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000014.00000002.2335368150.000002A7754C8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://127.0.0.1:	firefox.exe, 00000008.00000003.1784964371.00000232D8687000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=1266220	firefox.exe, 00000008.00000003.1302460195.00000232DB454000.00000004.00000800.00020000.00000000.sdmp	false		high
https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152	firefox.exe, 00000008.00000003.1304047602.00000232E85B5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bugzilla.mo	firefox.exe, 00000008.00000003.1260053833.00000232DC169000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mitmdetection.services.mozilla.com/	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://amazon.com	firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	false		high
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 00000008.00000003.1364249906.00000232E24CB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://shavar.services.mozilla.com/	firefox.exe, 00000008.00000003.1636965717.00000232DBACB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4CLY1pDY4pbW4CbWfpbY7ReNxR3UIG8zInwYIFIVs9eYi	prefs-1.js.8.dr	false		high
https://spocs.getpocket.com/	firefox.exe, 00000008.00000003.1453206804.00000232DB53E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1424045637.00000232DCC1C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000000E.00000002.2337822692.0000022C48912000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000014.00000002.2335368150.000002A775413000.00000004.00000800.00020000.00000000.sdmp	false		high
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://www.iqiyi.com/	firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://www.amazon.com/Z	firefox.exe, 00000008.00000003.1489307804.0000085F7DC03000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://spocs.getpocket.com/CN=The	firefox.exe, 00000014.00000002.2335368150.000002A775413000.00000004.00000800.00020000.00000000.sdmp	false		high
http://a9.com/-/spec/opensearch/1.0/	firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
http://www.inbox.lv/rfc2368/?value=%su	firefox.exe, 00000008.00000003.1403197057.00000232E45BC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://normandy.cdn.mozilla.net	firefox.exe, 00000008.00000003.1796246599.00000232D6966000.00000004.00000800.00020000.00000000.sdmp	false		high
https://monitor.firefox.com/user/dashboard	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://monitor.firefox.com/about	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
http://mozilla.org/MPL/2.0/.	firefox.exe, 00000008.00000003.1428133162.00000232DC9A6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1261525173.00000232E47D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1295084414.00000232E86C4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1437575989.00000232DBC8D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1506102934.00000232D90AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1606967869.00000232DCB3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1445642121.00000232DB5E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1458741786.00000232D80D6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1428133162.00000232DC99C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1334987548.00000232D7D78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1427262828.00000232DCA62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1421006107.00000232DD732000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1295084414.00000232E8686000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1890959435.00000232DB5E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1301219113.00000232DB4C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1228696225.00000232D7F89000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1872822699.00000232E2554000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1296668176.00000232E8635000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1262279554.00000232E4786000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1418732843.00000232DD7DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1788115893.00000232D7E39000.00000004.00000800.00020000.00000000.sdmp	false		high
https://account.bellmedia.c	firefox.exe, 00000008.00000003.1600213633.00000232DBC68000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.openh264.org/	firefox.exe, 00000008.00000003.1798389849.00000232D61E6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://login.microsoftonline.com	firefox.exe, 00000008.00000003.1600213633.00000232DBC68000.00000004.00000800.00020000.00000000.sdmp	false		high
https://coverage.mozilla.org	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
http://crl.thawte.com/ThawteTimestampingCA.crl0	firefox.exe, 00000008.00000003.1643163162.00000232E23AA000.00000004.00000800.00020000.00000000.sdmp, gmpopenh264.dll.tmp.8.dr	false		high
https://www.zhihu.com/	firefox.exe, 00000008.00000003.1799566738.00000232D60BE000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	firefox.exe, 00000008.00000003.1500295575.00000232DABFA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://a9.com/-/spec/opensearch/1.1/	firefox.exe, 00000008.00000003.1442584524.00000232DB8CB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://blocked.cdn.mozilla.net/	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://json-schema.org/draft/2019-09/schema	firefox.exe, 00000008.00000003.1440985675.00000232DBA59000.00000004.00000800.00020000.00000000.sdmp	false		high
http://exslt.org/dates-and-times$	firefox.exe, 00000008.00000003.1801622386.00000232D6081000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://apis.google.com	chromecache_129.11.dr, chromecache_126.11.dr	false		high
https://profiler.firefox.com	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://outlook.live.com/default.aspx?rru=compose&to=%s	firefox.exe, 00000008.00000003.1402987858.00000232E45C7000.00000004.00000800.00020000.00000000.sdmp	false		high
https://identity.mozilla.com/apps/relay	firefox.exe, 00000008.00000003.1413341694.00000232E2346000.00000004.00000800.00020000.00000000.sdmp	false		high
https://domains.google.com/suggest/flow	chromecache_129.11.dr	false		high
https://mozilla.cloudflare-dns.com/dns-query	firefox.exe, 00000014.00000002.2329941981.000002A775290000.00000002.10000000.00040000.00000000.sdmp	false		high
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	firefox.exe, 00000008.00000003.1421643865.00000232DCCDA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=1678448	firefox.exe, 00000008.00000003.1302460195.00000232DB46F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000008.00000003.1302460195.00000232DB454000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 00000008.00000003.1402987858.00000232E45C7000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
142.250.185.142	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
35.201.103.21	normandy-cdn.services.mozilla.com	United States	15169	GOOGLEUS	false
34.120.208.123	telemetry-incoming.r53-2.services.mozilla.com	United States	15169	GOOGLEUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
34.149.100.209	prod.remote-settings.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.193.91	services.addons.mozilla.org	United States	54113	FASTLYUS	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false

Private

IP
192.168.2.17
127.0.0.1

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1595355
Start date and time:	2025-01-20 18:51:18 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	39
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	1
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	mscoree.dll
Detection:	MAL
Classification:	mal52.winDLL@43/52@74/15
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Successful, ratio: 100% Number of executed functions: 9 Number of non-executed functions: 1
Cookbook Comments:	Found application associated with file extension: .dll

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, consent.exe, RuntimeBroker.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 2.23.77.188, 142.250.185.131, 172.217.18.14, 64.233.184.84, 172.217.16.206, 142.250.185.163, 142.250.186.78, 142.250.186.170, 142.250.186.138, 142.250.186.42, 142.250.185.106, 142.250.185.234, 142.250.186.106, 142.250.74.202, 216.58.212.138, 142.250.185.74, 142.250.181.234, 142.250.184.202, 142.250.185.138, 142.250.185.170, 216.58.212.170, 216.58.206.74, 216.58.206.42, 216.58.206.78, 34.211.125.135, 34.211.101.148, 44.233.129.8, 142.250.186.142, 2.22.61.59, 2.22.61.56, 142.250.184.234, 142.250.185.110, 216.58.206.35, 142.250.184.238, 142.250.185.78, 142.250.185.238, 52.149.20.212, 184.28.90.27, 13.89.178.26, 204.79.197.222, 13.107.4.254, 40.126.32.136, 2.23.227.208, 13.107.5.88
Excluded domains from analysis (whitelisted): fp.msedge.net, ciscobinary.openh264.org, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, dual-s-ring.msedge.net, clientservices.googleapis.com, aus5.mozilla.org, a19.dscg10.akamai.net, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, update.googleapis.com, safebrowsing.googleapis.com, www.gstatic.com, www.bing.com, clients1.google.com, fs.microsoft.com, shavar.prod.mozaws.net, accounts.google.com, ctldl.windowsupdate.com, ogads-pa.googleapis.com, detectportal.prod.mozaws.net, fe3cr.delivery.mp.microsoft.com, c-ring.msedge.net, edgedl.me.gvt1.com, evoke-windowsservices-tas.msedge.net, clients.l.google.com, browser.pipe.aria.microsoft.com, location.services.mozilla.com
Execution Graph export aborted for target firefox.exe, PID 5828 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
12:52:12	API Interceptor	1x Sleep call for process: firefox.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
34.117.188.166	qOH6oNqqoi.ps1	Get hash	malicious	PureCrypter, Amadey	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	GbpfWtymAP.exe	Get hash	malicious	Credential Flusher	Browse
	GbpfWtymAP.exe	Get hash	malicious	Credential Flusher	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	MDE_File_Sample_c404ec52446527b77da6860ca493ea2007ac03d5 (2).zip	Get hash	malicious	Unknown	Browse
	527.zip	Get hash	malicious	Unknown	Browse
	527.zip	Get hash	malicious	Unknown	Browse
239.255.255.250	https://d12u7tum9sda5e.cloudfront.net/	Get hash	malicious	Unknown	Browse
	https://justworks.app.link//?$deeplink_path=/alerts/time_off_requests/13a6b7f0-b2ae-4165-87b0-da6673653a54&$fallback_url=http%3A%2F%2Fwww.google.com.sg%2Furl%3Fsa%3Dt%26esrc%3DYUM58NDu%26source%3D%26rct%3D304J%26%26cd%3D256Du%26uact%26url%3Damp%2F%61%69%72%73%74%72%61%65%6D%69%65%2E%63%6F%6D%2F%23ZHVkbGV5bEB0b3RhbHNlbS5jb20=	Get hash	malicious	Unknown	Browse
	8RoqCjas5d.lnk	Get hash	malicious	Unknown	Browse
	Setup (1).exe	Get hash	malicious	Unknown	Browse
	https://service-noreply.info/0c2a711d26a98000eaba3e9cffd8f880ff889f9c	Get hash	malicious	HTMLPhisher	Browse
	https://url.uk.m.mimecastprotect.com/s/D_vKCN9kPF0ZrBphRsVSy--PJ?domain=google.com	Get hash	malicious	EvilProxy, HTMLPhisher	Browse
	https://quzab.pages.dev/?e=QXVzdGluLkJsYXNlQG1vZHVsYS5jb20=	Get hash	malicious	HTMLPhisher	Browse
	Alliant Broker of Record Letter.pdf	Get hash	malicious	Unknown	Browse
	https://blacksaltys.com	Get hash	malicious	Unknown	Browse
	https://github.com/Tarun999000/dfds/releases/download/fvxc/Order.receipt.845755-800.zip	Get hash	malicious	PureCrypter, AsyncRAT, Meduza Stealer	Browse
34.149.100.209	qOH6oNqqoi.ps1	Get hash	malicious	PureCrypter, Amadey	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	GbpfWtymAP.exe	Get hash	malicious	Credential Flusher	Browse
	GbpfWtymAP.exe	Get hash	malicious	Credential Flusher	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	527.zip	Get hash	malicious	Unknown	Browse
	527.zip	Get hash	malicious	Unknown	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
star-mini.c10r.facebook.com	https://tempumail13588.emlnk.com/lt.php?x=3DZy~GE7I3PO5XKuzQE4gumf3XEgvAHwv-5gkXbLKaOd6aF5_ky.xuG-142imNf#user_email=sophie-helen.franz@init.de&fname=Sophie-Helen&lname=Franz	Get hash	malicious	Unknown	Browse	157.240.252.35
	qOH6oNqqoi.ps1	Get hash	malicious	PureCrypter, Amadey	Browse	157.240.252.35
	https://www.canva.com/link?target=https%3A%2F%2Fhlbc.uscourtfilevault.com%2FCGZu5&design=DAGcXth4-wU&accessRole=viewer&linkSource=document,	Get hash	malicious	HTMLPhisher	Browse	157.240.253.35
	http://appstor.io	Get hash	malicious	Unknown	Browse	157.240.0.35
	https://ctrk.klclick3.com/l/01JHS5P1Q4NZYEF0R3PXW1679W_1	Get hash	malicious	Unknown	Browse	157.240.252.35
	https://mail.donaulab.rs/webmail/	Get hash	malicious	Unknown	Browse	157.240.0.35
	https://dakshbaxi.github.io/amazon_clone/	Get hash	malicious	HTMLPhisher	Browse	157.240.253.35
	random.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	random.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	https://communiition.weebly.com/?user-agent=mozilla/5.0+(windows+nt+10.0	Get hash	malicious	HTMLPhisher	Browse	157.240.251.35
twitter.com	qOH6oNqqoi.ps1	Get hash	malicious	PureCrypter, Amadey	Browse	104.244.42.193
	random.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	random.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
example.org	qOH6oNqqoi.ps1	Get hash	malicious	PureCrypter, Amadey	Browse	96.7.128.186
	BingWallpaper.exe	Get hash	malicious	Unknown	Browse	96.7.128.192
	random.exe	Get hash	malicious	Credential Flusher	Browse	96.7.128.192
	random.exe	Get hash	malicious	Credential Flusher	Browse	23.215.0.132
	GbpfWtymAP.exe	Get hash	malicious	Credential Flusher	Browse	23.215.0.132
	GbpfWtymAP.exe	Get hash	malicious	Credential Flusher	Browse	23.215.0.132
	random.exe	Get hash	malicious	Credential Flusher	Browse	96.7.128.192
	random.exe	Get hash	malicious	Credential Flusher	Browse	96.7.128.192
	MDE_File_Sample_c404ec52446527b77da6860ca493ea2007ac03d5 (2).zip	Get hash	malicious	Unknown	Browse	23.215.0.132
	527.zip	Get hash	malicious	Unknown	Browse	93.184.215.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	qOH6oNqqoi.ps1	Get hash	malicious	PureCrypter, Amadey	Browse	34.117.188.166
	http://currentlyatt412.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	34.117.77.79
	https://34t43y345gargasrgawe4h3w4h4ergergre-1701.vercel.app/global/rpticket12.html	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
	http://case-id-100034393.argentpropertiesvb.com/	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
	http://argentpropertiesvb.com/?helpbusiness-100078883	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
	http://case-id-100026693.argentpropertiesvb.com/?helpbusiness-100026693	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
	http://case-id-100084633.argentpropertiesvb.com/	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
	http://case-id-100078883.argentpropertiesvb.com/?helpbusiness-100078883	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
	https://case-id-100094505.argentpropertiesvb.com/?helpbusiness-100094505	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
	http://case-id-100048208.argentpropertiesvb.com/	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
FASTLYUS	https://justworks.app.link//?$deeplink_path=/alerts/time_off_requests/13a6b7f0-b2ae-4165-87b0-da6673653a54&$fallback_url=http%3A%2F%2Fwww.google.com.sg%2Furl%3Fsa%3Dt%26esrc%3DYUM58NDu%26source%3D%26rct%3D304J%26%26cd%3D256Du%26uact%26url%3Damp%2F%61%69%72%73%74%72%61%65%6D%69%65%2E%63%6F%6D%2F%23ZHVkbGV5bEB0b3RhbHNlbS5jb20=	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://service-noreply.info/0c2a711d26a98000eaba3e9cffd8f880ff889f9c	Get hash	malicious	HTMLPhisher	Browse	151.101.128.217
	https://url.uk.m.mimecastprotect.com/s/D_vKCN9kPF0ZrBphRsVSy--PJ?domain=google.com	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	151.101.1.229
	https://quzab.pages.dev/?e=QXVzdGluLkJsYXNlQG1vZHVsYS5jb20=	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://github.com/Tarun999000/dfds/releases/download/fvxc/Order.receipt.845755-800.zip	Get hash	malicious	PureCrypter, AsyncRAT, Meduza Stealer	Browse	185.199.111.133
	https://nam.dcv.ms/An1jJobaFZ	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://tempumail13588.emlnk.com/lt.php?x=3DZy~GE7I3PO5XKuzQE4gumf3XEgvAHwv-5gkXbLKaOd6aF5_ky.xuG-142imNf#user_email=sophie-helen.franz@init.de&fname=Sophie-Helen&lname=Franz	Get hash	malicious	Unknown	Browse	151.101.2.137
	ELECTRONIC RECEIPT_6257527338.html	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	qOH6oNqqoi.ps1	Get hash	malicious	PureCrypter, Amadey	Browse	151.101.1.91
	https://www.canva.com/link?target=https%3A%2F%2Fhlbc.uscourtfilevault.com%2FCGZu5&design=DAGcXth4-wU&accessRole=viewer&linkSource=document,	Get hash	malicious	HTMLPhisher	Browse	151.101.129.140
ATGS-MMD-ASUS	qOH6oNqqoi.ps1	Get hash	malicious	PureCrypter, Amadey	Browse	34.160.144.191
	https://ln.run/PTnX7	Get hash	malicious	Unknown	Browse	34.54.226.84
	http://appstor.io	Get hash	malicious	Unknown	Browse	34.160.55.127
	i686.elf	Get hash	malicious	Unknown	Browse	34.44.60.80
	http://currentlyatt412.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	34.1.227.231
	http://feed.oteconnect.com/-/BinanceAirdropBNB/Giveaway/index1.html	Get hash	malicious	Unknown	Browse	34.49.84.237
	frosty.sh4.elf	Get hash	malicious	Mirai	Browse	192.56.100.97
	frosty.arm.elf	Get hash	malicious	Mirai	Browse	34.161.108.224
	frosty.x86.elf	Get hash	malicious	Mirai	Browse	48.15.161.174
	https://hgkbjhyj.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	34.1.227.231
ATGS-MMD-ASUS	qOH6oNqqoi.ps1	Get hash	malicious	PureCrypter, Amadey	Browse	34.160.144.191
	https://ln.run/PTnX7	Get hash	malicious	Unknown	Browse	34.54.226.84
	http://appstor.io	Get hash	malicious	Unknown	Browse	34.160.55.127
	i686.elf	Get hash	malicious	Unknown	Browse	34.44.60.80
	http://currentlyatt412.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	34.1.227.231
	http://feed.oteconnect.com/-/BinanceAirdropBNB/Giveaway/index1.html	Get hash	malicious	Unknown	Browse	34.49.84.237
	frosty.sh4.elf	Get hash	malicious	Mirai	Browse	192.56.100.97
	frosty.arm.elf	Get hash	malicious	Mirai	Browse	34.161.108.224
	frosty.x86.elf	Get hash	malicious	Mirai	Browse	48.15.161.174
	https://hgkbjhyj.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	34.1.227.231

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
fb0aa01abe9d8e4037eb3473ca6e2dca	qOH6oNqqoi.ps1	Get hash	malicious	PureCrypter, Amadey	Browse	151.101.193.91 35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	random.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91 35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	random.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91 35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	GbpfWtymAP.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91 35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	GbpfWtymAP.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91 35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	random.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91 35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	random.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91 35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	527.zip	Get hash	malicious	Unknown	Browse	151.101.193.91 35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	527.zip	Get hash	malicious	Unknown	Browse	151.101.193.91 35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	random.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91 35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll (copy)	qOH6oNqqoi.ps1	Get hash	malicious	PureCrypter, Amadey	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	GbpfWtymAP.exe	Get hash	malicious	Credential Flusher	Browse
	GbpfWtymAP.exe	Get hash	malicious	Credential Flusher	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse
	527.zip	Get hash	malicious	Unknown	Browse
	527.zip	Get hash	malicious	Unknown	Browse
	random.exe	Get hash	malicious	Credential Flusher	Browse

Created / dropped Files

C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\uninstall_ping_308046B0AF4A39CB_4c7bb390-e611-4a66-a3ab-25c1a1050ad3.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7712
Entropy (8bit):	5.182504554595963
Encrypted:	false
SSDEEP:	192:HWgMXAi9tbhbVbTbfbRbObtbyEl7nJJA6UnSrDtTEd/Sb:HWRVtNhnzFSJELnSrDhEd/a
MD5:	7418E71D9011797681819485954879A9
SHA1:	68B87A58916CB68F79AE75610B8BD1A9EF24275D
SHA-256:	1728D2AF6B034C82EE579C4214397116DD0294AF335A08DF479439DD7862E2DD
SHA-512:	EE186BBB895A5179B8618DE2B1A8126C2ABC00FEDF7D644396A93D0EBFA58E4650ACECD83DBB8FF105017FE40309F1681A3D3E3830BFC3DBDAE129BDD69EAFCA
Malicious:	false
Preview:	{"type":"uninstall","id":"4c7bb390-e611-4a66-a3ab-25c1a1050ad3","creationDate":"2025-01-20T19:34:46.246Z","version":4,"application":{"architecture":"x86-64","buildId":"20230927232528","name":"Firefox","version":"118.0.1","displayVersion":"118.0.1","vendor":"Mozilla","platformVersion":"118.0.1","xpcomAbi":"x86_64-msvc","channel":"release"},"payload":{"otherInstalls":0},"clientId":"8df298bf-399d-48f6-9409-798321700083","environment":{"build":{"applicationId":"{ec8030f7-c20a-464f-9b0e-13a3a9e97384}","applicationName":"Firefox","architecture":"x86-64","buildId":"20230927232528","version":"118.0.1","vendor":"Mozilla","displayVersion":"118.0.1","platformVersion":"118.0.1","xpcomAbi":"x86_64-msvc","updaterAvailable":true},"partner":{"distributionId":null,"distributionVersion":null,"partnerId":null,"distributor":null,"distributorChannel":null,"partnerNames":[]},"system":{"memoryMB":8191,"virtualMaxMB":134217728,"cpu":{"isWindowsSMode":false,"count":4,"cores":4,"vendor":"GenuineIntel","name":"I

C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\uninstall_ping_308046B0AF4A39CB_4c7bb390-e611-4a66-a3ab-25c1a1050ad3.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7712
Entropy (8bit):	5.182504554595963
Encrypted:	false
SSDEEP:	192:HWgMXAi9tbhbVbTbfbRbObtbyEl7nJJA6UnSrDtTEd/Sb:HWRVtNhnzFSJELnSrDhEd/a
MD5:	7418E71D9011797681819485954879A9
SHA1:	68B87A58916CB68F79AE75610B8BD1A9EF24275D
SHA-256:	1728D2AF6B034C82EE579C4214397116DD0294AF335A08DF479439DD7862E2DD
SHA-512:	EE186BBB895A5179B8618DE2B1A8126C2ABC00FEDF7D644396A93D0EBFA58E4650ACECD83DBB8FF105017FE40309F1681A3D3E3830BFC3DBDAE129BDD69EAFCA
Malicious:	false
Preview:	{"type":"uninstall","id":"4c7bb390-e611-4a66-a3ab-25c1a1050ad3","creationDate":"2025-01-20T19:34:46.246Z","version":4,"application":{"architecture":"x86-64","buildId":"20230927232528","name":"Firefox","version":"118.0.1","displayVersion":"118.0.1","vendor":"Mozilla","platformVersion":"118.0.1","xpcomAbi":"x86_64-msvc","channel":"release"},"payload":{"otherInstalls":0},"clientId":"8df298bf-399d-48f6-9409-798321700083","environment":{"build":{"applicationId":"{ec8030f7-c20a-464f-9b0e-13a3a9e97384}","applicationName":"Firefox","architecture":"x86-64","buildId":"20230927232528","version":"118.0.1","vendor":"Mozilla","displayVersion":"118.0.1","platformVersion":"118.0.1","xpcomAbi":"x86_64-msvc","updaterAvailable":true},"partner":{"distributionId":null,"distributionVersion":null,"partnerId":null,"distributor":null,"distributorChannel":null,"partnerNames":[]},"system":{"memoryMB":8191,"virtualMaxMB":134217728,"cpu":{"isWindowsSMode":false,"count":4,"cores":4,"vendor":"GenuineIntel","name":"I

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Local\Temp\tmpaddon

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	453023
Entropy (8bit):	7.997718157581587
Encrypted:	true
SSDEEP:	12288:tESTeqTI2r4ZbCgUKWKNeRcPMb6qlV7hVZe3:tEsed2Xh9/bdzZe3
MD5:	85430BAED3398695717B0263807CF97C
SHA1:	FFFBEE923CEA216F50FCE5D54219A188A5100F41
SHA-256:	A9F4281F82B3579581C389E8583DC9F477C7FD0E20C9DFC91A2E611E21E3407E
SHA-512:	06511F1F6C6D44D076B3C593528C26A602348D9C41689DBF5FF716B671C3CA5756B12CB2E5869F836DEDCE27B1A5CFE79B93C707FD01F8E84B620923BB61B5F1
Malicious:	false
Preview:	PK.........bN...R..........gmpopenh264.dll..\|.E.0.=..I.....1....4f1q.`.........q.....'+....hm{.z..o_.{w........$..($A!...\|L...B&A2.s.{..Dd......c.U.U..9u.S...K.l`...../.d.-....\|.....&....9......wn..x......i.#O.+.Y.l......+....,3.3f..\..c.SSS,............N...GG...F.'.&.:'.K.Z&.>.@.g..M...M.`............ZR....^jg.G.Kb.o~va.....<Z..1.#.O.e.....D..X..i..$imBW..Q&.......P.....,M.,..:.c...-...\...........-i.K.I..4.a..6.....Ov=...W..F.CH.>...a.'.x...#@f...d..u.1....OV.1o}....g.5.._.3.J.Hi.Z.ipM....b.Z....%.G..F................/..3.q..J.....o...%.g.N..}..).3.N%.!..q........^I.m..~...6.#.~+.....A...I]r...x...<IYj....p0..`S.M@.E..f.=.;!.@.....E..E....... .0.n....Jd..d......uM.-.qI.lR..z..=}..r.D.XLZ....x.$..\|c.1.cUkM.&.Qn]..a]t.h...!.6 7..Jd.DvKJ"Wgd*%n...w...Jni.inmr.@M.$'Z.s....#)%..Rs..:.h....R....\..t.6..'.g.........Uj+F.cr:\|..!..K.W.Y...17......,....r.....>.N..3.R.Y.._\...Ir.DNJdM... .k...&V-....z.%...-...D..i..&...6....7.2T).>..0..%.&.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 20 16:52:06 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.991987703001184
Encrypted:	false
SSDEEP:	48:82bd9TS7fDH3eidAKZdA1JehwiZUklqehNy+3:82/Mkqy
MD5:	40CCF2910D9C534DE496A5F24896366B
SHA1:	8A8FD585E9EE3938304510DD2891245C2EA6B045
SHA-256:	7E973985FFDE21881A0DDCF879F25FA5EB5F54A0ADDA00FC5EA2759C82161266
SHA-512:	EFF5BDAD869D9EEDA36717B9DC07BBD2FE4A48848908F0E95540DB5714083DF4F8E30CB87E2F3D07A6346330AD37603476201580C91DA74481715B8E0B380297
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....L:.dk......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I4Zq.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4Z......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V4Z......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V4Z.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V4Z.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0".......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 20 16:52:06 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.006788776481057
Encrypted:	false
SSDEEP:	48:8Dbd9TS7fDH3eidAKZdA10eh/iZUkAQkqehay+2:8D/Mm9QDy
MD5:	8B987B728B23E44F49142F1A85DF95F5
SHA1:	E621FCF61072786C939FEF19EAC9D2FD702A7BF6
SHA-256:	B61EA6292502249E7B31B1B1B1BD84976961D0716715E9DFAEA3D527D51B7463
SHA-512:	D1F159A95F489721089D4792B7A6EC6B8FCD52CB1BA6984FA51E6792E160B510B0613C80075B37B992B918FC4A6A27C519388C46FC969CC7FB76F2F803F6E70D
Malicious:	false
Preview:	L..................F.@.. ...$+.,....p. .dk......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I4Zq.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4Z......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V4Z......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V4Z.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V4Z.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0".......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0201119209760305
Encrypted:	false
SSDEEP:	48:8ebd9TS7fjH3eidAKZdA14tIeh7sFiZUkmgqeh7sQy+BX:8e/M+nuy
MD5:	E12291719470BBBCA6E4A67C3FC26933
SHA1:	49B00DFD2758B6DADB38298FDF35CA6EF0A2B97C
SHA-256:	31248420D81ACF16D5F671F27944E08E213332EEF40B515AF7B469B739AFE4E8
SHA-512:	ADA66FF128C6D7056F5D55D1C203E00423472D3A917BC6530864F4594A4350F71B0767533D0C912248693AE2295201845230C9136852B9A65B36F6E139355E66
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I4Zq.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4Z......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V4Z......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V4Z.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0".......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 20 16:52:06 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.005075462464748
Encrypted:	false
SSDEEP:	48:8Tbd9TS7fDH3eidAKZdA1behDiZUkwqehWy+R:8T/M9Yy
MD5:	F31E7292A66FB46A067453F15FBF0F0B
SHA1:	8FFA7F8513502273A253D47B10C8AB394B3EBFCC
SHA-256:	82DFFA7E38F9F664A6291AE6E426F59EA331B61651FCC247F7C2FB21C0696D4C
SHA-512:	B9D0B27A297894C38B2089CD7C936EDB7530570860B456E5B26612A008E116BCB44A5A113AC5F19881C5777D701D6D0E8E5C58C68C1E833101935AE1A2988B7E
Malicious:	false
Preview:	L..................F.@.. ...$+.,....0...dk......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I4Zq.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4Z......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V4Z......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V4Z.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V4Z.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0".......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 20 16:52:06 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.997135944380186
Encrypted:	false
SSDEEP:	48:80bd9TS7fDH3eidAKZdA1VehBiZUk1W1qehky+C:80/Md9Ey
MD5:	E262BEF9799E93FD3BF46A5F305826E0
SHA1:	22D360F459248C32AE05EB123522B71FFAEFF379
SHA-256:	79FBC30AFC63AB6046AF42F9C7F5400E43F4B8AB20F078A38A601E78486BE0C1
SHA-512:	560CA9D4693C2B8BFE1D3CC2C5FC7F7610F16A521DEADED18443E2B5E346E267539E7FEB278F1C2500162E5C40E2E3961D3B700271364783EDE771408ED7893C
Malicious:	false
Preview:	L..................F.@.. ...$+.,......,.dk......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I4Zq.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4Z......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V4Z......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V4Z.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V4Z.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0".......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 20 16:52:06 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.00732604687546
Encrypted:	false
SSDEEP:	48:8Zbd9TS7fDH3eidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbuy+yT+:8Z/MtTTTbxWOvTbuy7T
MD5:	904341262AAE2DB1D329010419E7D7EF
SHA1:	2065709B1DDCD3D77C0367DBC7950FF99B30FE7F
SHA-256:	AB5E3D879250FDF6948D89EEA7096058176A48FA650901CD7C16D642A19FC86D
SHA-512:	9466904C2BBDECC47057308DEDA04F86D614E0E84E4FF4AF6E8FBA7061990C9B359837F8920E0335164666065F50BD935B18952E2598F7F5D5342BF121E3B84B
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....H..dk......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I4Zq.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4Z......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V4Z......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V4Z.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V4Z.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0".......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\ExperimentStoreData.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5534
Entropy (8bit):	4.930809180094187
Encrypted:	false
SSDEEP:	96:8S+OtPUFqOdwNIOd4c8iQosJnHJPm8V/ZiwJHhZ01jvYsFLO+8P:8S+OxUMOdwiOdEiQoslH5jV/ZiwBhZ0u
MD5:	2A4BAEF1FCC038A8C1E41B1B2FA096C2
SHA1:	FE3DECF9FE9425DD24D2C788BB03DDA0BD473211
SHA-256:	547B80A5B81C7BC95A6774D22726F4BEE8515FFB6017B4173F8F03F2D7514BDD
SHA-512:	0BB1D036CAFF8D5E83EDEBEE202527234D1601C59A28E4D39F55E752525EF90703E87E309A4FBC10B5B85EAB65D418BC3D26115721894D03406E3401F39804AE
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"6cea30b7-d3c3-43b4-996a-0f148753cfb8","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-06T09:46:14.863Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"ech-roll-out":{"slug":"ech-roll-out","branch":{"slug":"rollout","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\ExperimentStoreData.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5534
Entropy (8bit):	4.930809180094187
Encrypted:	false
SSDEEP:	96:8S+OtPUFqOdwNIOd4c8iQosJnHJPm8V/ZiwJHhZ01jvYsFLO+8P:8S+OxUMOdwiOdEiQoslH5jV/ZiwBhZ0u
MD5:	2A4BAEF1FCC038A8C1E41B1B2FA096C2
SHA1:	FE3DECF9FE9425DD24D2C788BB03DDA0BD473211
SHA-256:	547B80A5B81C7BC95A6774D22726F4BEE8515FFB6017B4173F8F03F2D7514BDD
SHA-512:	0BB1D036CAFF8D5E83EDEBEE202527234D1601C59A28E4D39F55E752525EF90703E87E309A4FBC10B5B85EAB65D418BC3D26115721894D03406E3401F39804AE
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"6cea30b7-d3c3-43b4-996a-0f148753cfb8","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-06T09:46:14.863Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"ech-roll-out":{"slug":"ech-roll-out","branch":{"slug":"rollout","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\addonStartup.json.lz4 (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 26903 bytes
Category:	dropped
Size (bytes):	6071
Entropy (8bit):	6.621805746087058
Encrypted:	false
SSDEEP:	96:22YbKsKNU2xWrp327tGmD4wBON6hCY9rI7hlSAJVrfzjZXjkTndS12opTKZ6ZE:2Tx2x2t0FDJ4NF6ILDfzjtedh6TKZX
MD5:	06954E2BEA75157FA006AFCFEBE36E67
SHA1:	3606B168172013512586D9968FB33C46E2FA1EB7
SHA-256:	D96E136A262EF21426B60DE74EFC49DD72D5536D875D10A3771EFE7F97242BFF
SHA-512:	A532486D1ADB022A9C6CEBD5D20A530DF99F5D10CC390891CC9E58BDA3BA561075C8D9545FE38AF210535FF5FBEB68C61AA03F21AD2D1ED43FF5B963DCB92101
Malicious:	false
Preview:	mozLz40..i....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\addonStartup.json.lz4.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 26903 bytes
Category:	dropped
Size (bytes):	6071
Entropy (8bit):	6.621805746087058
Encrypted:	false
SSDEEP:	96:22YbKsKNU2xWrp327tGmD4wBON6hCY9rI7hlSAJVrfzjZXjkTndS12opTKZ6ZE:2Tx2x2t0FDJ4NF6ILDfzjtedh6TKZX
MD5:	06954E2BEA75157FA006AFCFEBE36E67
SHA1:	3606B168172013512586D9968FB33C46E2FA1EB7
SHA-256:	D96E136A262EF21426B60DE74EFC49DD72D5536D875D10A3771EFE7F97242BFF
SHA-512:	A532486D1ADB022A9C6CEBD5D20A530DF99F5D10CC390891CC9E58BDA3BA561075C8D9545FE38AF210535FF5FBEB68C61AA03F21AD2D1ED43FF5B963DCB92101
Malicious:	false
Preview:	mozLz40..i....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\addons.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	3.91829583405449
Encrypted:	false
SSDEEP:	3:YWGifTJE6iHQ:YWGif9EE
MD5:	3088F0272D29FAA42ED452C5E8120B08
SHA1:	C72AA542EF60AFA3DF5DFE1F9FCC06C0B135BE23
SHA-256:	D587CEC944023447DC91BC5F71E2291711BA5ADD337464837909A26F34BC5A06
SHA-512:	B662414EDD6DEF8589304904263584847586ECCA0B0E6296FB3ADB2192D92FB48697C99BD27C4375D192150E3F99102702AF2391117FFF50A9763C74C193D798
Malicious:	false
Preview:	{"schema":6,"addons":[]}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\addons.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	3.91829583405449
Encrypted:	false
SSDEEP:	3:YWGifTJE6iHQ:YWGif9EE
MD5:	3088F0272D29FAA42ED452C5E8120B08
SHA1:	C72AA542EF60AFA3DF5DFE1F9FCC06C0B135BE23
SHA-256:	D587CEC944023447DC91BC5F71E2291711BA5ADD337464837909A26F34BC5A06
SHA-512:	B662414EDD6DEF8589304904263584847586ECCA0B0E6296FB3ADB2192D92FB48697C99BD27C4375D192150E3F99102702AF2391117FFF50A9763C74C193D798
Malicious:	false
Preview:	{"schema":6,"addons":[]}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\crashes\store.json.mozlz4 (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 56 bytes
Category:	dropped
Size (bytes):	66
Entropy (8bit):	4.837595020998689
Encrypted:	false
SSDEEP:	3:3fX/xH8IXl/I3v0lb7iioW:vXpH1RPXt
MD5:	A6338865EB252D0EF8FCF11FA9AF3F0D
SHA1:	CECDD4C4DCAE10C2FFC8EB938121B6231DE48CD3
SHA-256:	078648C042B9B08483CE246B7F01371072541A2E90D1BEB0C8009A6118CBD965
SHA-512:	D950227AC83F4E8246D73F9F35C19E88CE65D0CA5F1EF8CCBB02ED6EFC66B1B7E683E2BA0200279D7CA4B49831FD8C3CEB0584265B10ACCFF2611EC1CA8C0C6C
Malicious:	false
Preview:	mozLz40.8.....{"v":1,"crashes":{},"countsByDay....rruptDate":null}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\crashes\store.json.mozlz4.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 56 bytes
Category:	dropped
Size (bytes):	66
Entropy (8bit):	4.837595020998689
Encrypted:	false
SSDEEP:	3:3fX/xH8IXl/I3v0lb7iioW:vXpH1RPXt
MD5:	A6338865EB252D0EF8FCF11FA9AF3F0D
SHA1:	CECDD4C4DCAE10C2FFC8EB938121B6231DE48CD3
SHA-256:	078648C042B9B08483CE246B7F01371072541A2E90D1BEB0C8009A6118CBD965
SHA-512:	D950227AC83F4E8246D73F9F35C19E88CE65D0CA5F1EF8CCBB02ED6EFC66B1B7E683E2BA0200279D7CA4B49831FD8C3CEB0584265B10ACCFF2611EC1CA8C0C6C
Malicious:	false
Preview:	mozLz40.8.....{"v":1,"crashes":{},"countsByDay....rruptDate":null}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\extensions.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	36830
Entropy (8bit):	5.184464489557842
Encrypted:	false
SSDEEP:	768:pI4LvfDX+4V6c414hB4z4N0fVhvM4C404vi4FrDi4nwi4g:pufLvN7r
MD5:	DF08076BA8396175A34A9C40F9FBBA86
SHA1:	A580FE5D66ADE50794F5673CA9EA539F7BEA0F0B
SHA-256:	8AEEA287EA3FC104DBABC53CF0F6F8861A6F4A4CF9D5C928C96414DE3DE405EA
SHA-512:	92D1C173E749AC66A019FFCF8ED64CD3C43D4B38778511C9E85F824690CEA670AF2A63D189C002EC6F0DDB89523B29E286D238A38AF4E670A3A7DAA10F17B39C
Malicious:	false
Preview:	{"schemaVersion":35,"addons":[{"id":"formautofill@mozilla.org","syncGUID":"{5b1f4f1d-523b-47e8-b6c7-351d18d0ffb2}","version":"1.0.1","type":"extension","loader":null,"updateURL":null,"installOrigins":null,"manifestVersion":2,"optionsURL":null,"optionsType":null,"optionsBrowserStyle":true,"aboutURL":null,"defaultLocale":{"name":"Form Autofill","creator":null,"developers":null,"translators":null,"contributors":null},"visible":true,"active":true,"userDisabled":false,"appDisabled":false,"embedderDisabled":false,"installDate":1695865283000,"updateDate":1695865283000,"applyBackgroundUpdates":1,"path":"C:\\Program Files\\Mozilla Firefox\\browser\\features\\formautofill@mozilla.org.xpi","skinnable":false,"sourceURI":null,"releaseNotesURI":null,"softDisabled":false,"foreignInstall":false,"strictCompatibility":true,"locales":[],"targetApplications":[{"id":"toolkit@mozilla.org","minVersion":null,"maxVersion":null}],"targetPlatforms":[],"signedDate":null,"seen":true,"dependencies":[],"incognito":"

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\extensions.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	36830
Entropy (8bit):	5.184464489557842
Encrypted:	false
SSDEEP:	768:pI4LvfDX+4V6c414hB4z4N0fVhvM4C404vi4FrDi4nwi4g:pufLvN7r
MD5:	DF08076BA8396175A34A9C40F9FBBA86
SHA1:	A580FE5D66ADE50794F5673CA9EA539F7BEA0F0B
SHA-256:	8AEEA287EA3FC104DBABC53CF0F6F8861A6F4A4CF9D5C928C96414DE3DE405EA
SHA-512:	92D1C173E749AC66A019FFCF8ED64CD3C43D4B38778511C9E85F824690CEA670AF2A63D189C002EC6F0DDB89523B29E286D238A38AF4E670A3A7DAA10F17B39C
Malicious:	false
Preview:	{"schemaVersion":35,"addons":[{"id":"formautofill@mozilla.org","syncGUID":"{5b1f4f1d-523b-47e8-b6c7-351d18d0ffb2}","version":"1.0.1","type":"extension","loader":null,"updateURL":null,"installOrigins":null,"manifestVersion":2,"optionsURL":null,"optionsType":null,"optionsBrowserStyle":true,"aboutURL":null,"defaultLocale":{"name":"Form Autofill","creator":null,"developers":null,"translators":null,"contributors":null},"visible":true,"active":true,"userDisabled":false,"appDisabled":false,"embedderDisabled":false,"installDate":1695865283000,"updateDate":1695865283000,"applyBackgroundUpdates":1,"path":"C:\\Program Files\\Mozilla Firefox\\browser\\features\\formautofill@mozilla.org.xpi","skinnable":false,"sourceURI":null,"releaseNotesURI":null,"softDisabled":false,"foreignInstall":false,"strictCompatibility":true,"locales":[],"targetApplications":[{"id":"toolkit@mozilla.org","minVersion":null,"maxVersion":null}],"targetPlatforms":[],"signedDate":null,"seen":true,"dependencies":[],"incognito":"

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1021904
Entropy (8bit):	6.648417932394748
Encrypted:	false
SSDEEP:	12288:vYLdTfFKbNSjv92eFN+3wH+NYriA0Iq6lh6VawYIpAvwHN/Uf1h47HAfg1oet:vYLdTZ923NYrjwNpgwef1hzfg1x
MD5:	FE3355639648C417E8307C6D051E3E37
SHA1:	F54602D4B4778DA21BC97C7238FC66AA68C8EE34
SHA-256:	1ED7877024BE63A049DA98733FD282C16BD620530A4FB580DACEC3A78ACE914E
SHA-512:	8F4030BB2464B98ECCBEA6F06EB186D7216932702D94F6B84C56419E9CF65A18309711AB342D1513BF85AED402BC3535A70DB4395874828F0D35C278DD2EAC9C
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: qOH6oNqqoi.ps1, Detection: malicious, Browse Filename: random.exe, Detection: malicious, Browse Filename: random.exe, Detection: malicious, Browse Filename: GbpfWtymAP.exe, Detection: malicious, Browse Filename: GbpfWtymAP.exe, Detection: malicious, Browse Filename: random.exe, Detection: malicious, Browse Filename: random.exe, Detection: malicious, Browse Filename: 527.zip, Detection: malicious, Browse Filename: 527.zip, Detection: malicious, Browse Filename: random.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......NH...)...)...)..eM...)..eM...)..eM..)..eM...)...)..i)..XA...)..XA..;)..XA...)...)..g)..cA...)..cA...)..Rich.)..........PE..d....z\.........." .....t................................................................`.........................................P...,...\|...(............P...H...z.................T...........................0...................p............................text...$s.......t.................. ..`.rdata...~...........x..............@..@.data....3..........................@....pdata...H...P...J..................@..@.rodata..............^..............@..@.reloc...............j..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1021904
Entropy (8bit):	6.648417932394748
Encrypted:	false
SSDEEP:	12288:vYLdTfFKbNSjv92eFN+3wH+NYriA0Iq6lh6VawYIpAvwHN/Uf1h47HAfg1oet:vYLdTZ923NYrjwNpgwef1hzfg1x
MD5:	FE3355639648C417E8307C6D051E3E37
SHA1:	F54602D4B4778DA21BC97C7238FC66AA68C8EE34
SHA-256:	1ED7877024BE63A049DA98733FD282C16BD620530A4FB580DACEC3A78ACE914E
SHA-512:	8F4030BB2464B98ECCBEA6F06EB186D7216932702D94F6B84C56419E9CF65A18309711AB342D1513BF85AED402BC3535A70DB4395874828F0D35C278DD2EAC9C
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......NH...)...)...)..eM...)..eM...)..eM..)..eM...)...)..i)..XA...)..XA..;)..XA...)...)..g)..cA...)..cA...)..Rich.)..........PE..d....z\.........." .....t................................................................`.........................................P...,...\|...(............P...H...z.................T...........................0...................p............................text...$s.......t.................. ..`.rdata...~...........x..............@..@.data....3..........................@....pdata...H...P...J..................@..@.rodata..............^..............@..@.reloc...............j..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	116
Entropy (8bit):	4.968220104601006
Encrypted:	false
SSDEEP:	3:C3OuN9RAM7VDXcEzq+rEakOvTMBv+FdBAIABv+FEn:0BDUmHlvAWeWEn
MD5:	3D33CDC0B3D281E67DD52E14435DD04F
SHA1:	4DB88689282FD4F9E9E6AB95FCBB23DF6E6485DB
SHA-256:	F526E9F98841D987606EFEAFF7F3E017BA9FD516C4BE83890C7F9A093EA4C47B
SHA-512:	A4A96743332CC8EF0F86BC2E6122618BFC75ED46781DADBAC9E580CD73DF89E74738638A2CCCB4CAA4CBBF393D771D7F2C73F825737CDB247362450A0D4A4BC1
Malicious:	false
Preview:	Name: gmpopenh264.Description: GMP Plugin for OpenH264..Version: 1.8.1.APIs: encode-video[h264], decode-video[h264].

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	116
Entropy (8bit):	4.968220104601006
Encrypted:	false
SSDEEP:	3:C3OuN9RAM7VDXcEzq+rEakOvTMBv+FdBAIABv+FEn:0BDUmHlvAWeWEn
MD5:	3D33CDC0B3D281E67DD52E14435DD04F
SHA1:	4DB88689282FD4F9E9E6AB95FCBB23DF6E6485DB
SHA-256:	F526E9F98841D987606EFEAFF7F3E017BA9FD516C4BE83890C7F9A093EA4C47B
SHA-512:	A4A96743332CC8EF0F86BC2E6122618BFC75ED46781DADBAC9E580CD73DF89E74738638A2CCCB4CAA4CBBF393D771D7F2C73F825737CDB247362450A0D4A4BC1
Malicious:	false
Preview:	Name: gmpopenh264.Description: GMP Plugin for OpenH264..Version: 1.8.1.APIs: encode-video[h264], decode-video[h264].

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035333735952226504
Encrypted:	false
SSDEEP:	3:GtlstFt/CuflbqOgIGtlstFt/CuflbqOgI789//alEl:GtWtCSZNGtWtCSZN789XuM
MD5:	696A78A5ECD60211511517460A3D61DC
SHA1:	D4F9B0BAA85CC66A73C6602BD242A491BF182E61
SHA-256:	A22CDB6D04182894E177B8E565F10C12168A5E3105367007D03C2F312E14078F
SHA-512:	ACEC0D3EF365D2BCFD6DF2FDFA54BA561C005C06C69CA10B6F1B52ECE114D276EAA28D9AF57FEA9DA77B5CE90C9BBCC750F210CC843D27F94DB731E87A8E4F34
Malicious:	false
Preview:	..-.......................m..>\|Yy..0T..pl.D.{.m..-.......................m..>\|Yy..0T..pl.D.{.m........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03989725522705737
Encrypted:	false
SSDEEP:	3:Ol1rm3XuNclWuIb2l8rEXsxdwhml8XW3R2:Kk3X8b2l8dMhm93w
MD5:	78A5450936908100206625C57F34F878
SHA1:	F57A15BF098C6D0A42FCA3F2B9867C0C895F4FDF
SHA-256:	71DEDDE11C7D557CD4CBCE24D1A2E8C58C2E6CB4B1E1FCB03D6ACD45646F6AE7
SHA-512:	4BE167CC9AF10E9AFD91916434CB974D90EC13CEF67B20C7515A0DD83E7F52870B37BD86EC1F6B98213F42A53E0495B6C13E2440AF3349F4C3F7287A8BD92FC0
Malicious:	false
Preview:	7....-..........y..0T..p.../...........y..0T..p.m..Y\|>.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	modified
Size (bytes):	13162
Entropy (8bit):	5.48907239748482
Encrypted:	false
SSDEEP:	192:0nMRknDYbBp6sLZY5vqaXg6whUaNmR5RZNBw8ss4Sl:Se/FY5vD/Wmxw240
MD5:	3AB7918980AD214FC407439D242A7012
SHA1:	C843FD3308DA24EF1275DF40B35C462687C994CF
SHA-256:	5C57CBA6CF292BA6DA54E3C8D42202F29B56A90A7BDA2073E7E652CDFA21B529
SHA-512:	BB795DFA826D9FC90DF8173DED45A68B5A3179D9556E07932DC1DF0E54DDF1E0C28F174BAFC41B5FAB9D602E29CCF24C27D1C25889558561973500F579032B5C
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "6ea194ec-b729-4b57-856d-4dd8fa633099");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1737401654);..user_pref("app.update.lastUpdateTime.background-update-timer", 1737401654);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1737401654);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 173740

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	13162
Entropy (8bit):	5.48907239748482
Encrypted:	false
SSDEEP:	192:0nMRknDYbBp6sLZY5vqaXg6whUaNmR5RZNBw8ss4Sl:Se/FY5vD/Wmxw240
MD5:	3AB7918980AD214FC407439D242A7012
SHA1:	C843FD3308DA24EF1275DF40B35C462687C994CF
SHA-256:	5C57CBA6CF292BA6DA54E3C8D42202F29B56A90A7BDA2073E7E652CDFA21B529
SHA-512:	BB795DFA826D9FC90DF8173DED45A68B5A3179D9556E07932DC1DF0E54DDF1E0C28F174BAFC41B5FAB9D602E29CCF24C27D1C25889558561973500F579032B5C
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "6ea194ec-b729-4b57-856d-4dd8fa633099");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1737401654);..user_pref("app.update.lastUpdateTime.background-update-timer", 1737401654);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1737401654);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 173740

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\protections.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 1, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 2, cookie 0x1, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.04062825861060003
Encrypted:	false
SSDEEP:	3:lSGBl/l/zl9l/AltllPltlnKollzvulJOlzALRWemFxu7TuRjBFbrl58lcV+wgn8:ltBl/lqN1K4BEJYqWvLue3FMOrMZ0l
MD5:	60C09456D6362C6FBED48C69AA342C3C
SHA1:	58B6E22DAA48C75958B429F662DEC1C011AE74D3
SHA-256:	FE1A432A2CD096B7EEA870D46D07F5197E34B4D10666E6E1C357FAA3F2FE2389
SHA-512:	936DBC887276EF07732783B50EAFE450A8598B0492B8F6C838B337EF3E8A6EA595E7C7A2FA4B3E881887FAAE2D207B953A4C65ED8C964D93118E00D3E03882BD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......x..x..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\sessionstore-backups\recovery.baklz4 (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 5824 bytes
Category:	dropped
Size (bytes):	1504
Entropy (8bit):	6.262875649331429
Encrypted:	false
SSDEEP:	24:veSUGliFoqlzUjxaGLXV+2v62PHYB+mkDT5sEIDG5ti6iFHnGhC7BahRyaQhTa6B:WplsaGgOqB+mqZx5mwC9Vu6Fgyvu0
MD5:	5A9209280CCD4FA03CBFEEFE839A4D7A
SHA1:	E1900474FC6C6795AD11DDF954CEC59422F0D82D
SHA-256:	6CEC6CF1E1CBDB30785696B5B5585EFA836443089855CFF237BF3AA72B777E90
SHA-512:	CE8A0FE01772AEFA10DD5F6589171AD80D9D06A1ADD519A196ECCCD86FDB156B82896FEFA6109EEA4E9586E59F51F6C7CDB53E2C606F18716E9AC7EDE474BDA4
Malicious:	false
Preview:	mozLz40.......{"version":["ses....restore",1],"windows":[{"tab..bentrie...}url":"about:home","title":"New Tab","cacheKey":0,"ID":7,"docshellUUID":"{2051b36c-d13b-40c8-ad30-d546fb3b845e}","resultPrincipalURI":null,"p....ToInherit_base64":"{\"0\":...\"moz-null4...:{b0dc15ea-c354-4375-b6b0-5a756f870af6}\"}}","hasUserInteractA...false,"triggeringP\.....3...E..6docIdentifier":8,"persist":true}],"lastAccessed":1737401664570,"hiddey..searchMode...userContextId\|..attribut....{},"index":1,"requestedI..p0,"imag....chrome://branding/cU..nt/icon32.png"..aselect...,"_closedT5.@],"_...C....GroupCount":-1,"busy...r...Flags":2167541758....dth":1164,"height":891,"screenX":4...Y..Aizem..."maximized"...BeforeMin...&..workspace...."ef4daec1-3482-49fb-8+.@0034<..9e1a","zB..1...WH..j........E..:..{.1":{..jUpdate.....wtartTim..P21804...centCrash...0},"global..Dcook.. hoa..."addons.mozilla.org","valu...A3bdb2d82ca664bd9afcdd6fd1aa40c90d743edc508caf9a55bbff4cde0404c2f","path":"/","na..a"taarI\|.Recure...,"httpo

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\sessionstore-backups\recovery.jsonlz4 (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 5824 bytes
Category:	dropped
Size (bytes):	1504
Entropy (8bit):	6.262875649331429
Encrypted:	false
SSDEEP:	24:veSUGliFoqlzUjxaGLXV+2v62PHYB+mkDT5sEIDG5ti6iFHnGhC7BahRyaQhTa6B:WplsaGgOqB+mqZx5mwC9Vu6Fgyvu0
MD5:	5A9209280CCD4FA03CBFEEFE839A4D7A
SHA1:	E1900474FC6C6795AD11DDF954CEC59422F0D82D
SHA-256:	6CEC6CF1E1CBDB30785696B5B5585EFA836443089855CFF237BF3AA72B777E90
SHA-512:	CE8A0FE01772AEFA10DD5F6589171AD80D9D06A1ADD519A196ECCCD86FDB156B82896FEFA6109EEA4E9586E59F51F6C7CDB53E2C606F18716E9AC7EDE474BDA4
Malicious:	false
Preview:	mozLz40.......{"version":["ses....restore",1],"windows":[{"tab..bentrie...}url":"about:home","title":"New Tab","cacheKey":0,"ID":7,"docshellUUID":"{2051b36c-d13b-40c8-ad30-d546fb3b845e}","resultPrincipalURI":null,"p....ToInherit_base64":"{\"0\":...\"moz-null4...:{b0dc15ea-c354-4375-b6b0-5a756f870af6}\"}}","hasUserInteractA...false,"triggeringP\.....3...E..6docIdentifier":8,"persist":true}],"lastAccessed":1737401664570,"hiddey..searchMode...userContextId\|..attribut....{},"index":1,"requestedI..p0,"imag....chrome://branding/cU..nt/icon32.png"..aselect...,"_closedT5.@],"_...C....GroupCount":-1,"busy...r...Flags":2167541758....dth":1164,"height":891,"screenX":4...Y..Aizem..."maximized"...BeforeMin...&..workspace...."ef4daec1-3482-49fb-8+.@0034<..9e1a","zB..1...WH..j........E..:..{.1":{..jUpdate.....wtartTim..P21804...centCrash...0},"global..Dcook.. hoa..."addons.mozilla.org","valu...A3bdb2d82ca664bd9afcdd6fd1aa40c90d743edc508caf9a55bbff4cde0404c2f","path":"/","na..a"taarI\|.Recure...,"httpo

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\sessionstore-backups\recovery.jsonlz4.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 5824 bytes
Category:	dropped
Size (bytes):	1504
Entropy (8bit):	6.262875649331429
Encrypted:	false
SSDEEP:	24:veSUGliFoqlzUjxaGLXV+2v62PHYB+mkDT5sEIDG5ti6iFHnGhC7BahRyaQhTa6B:WplsaGgOqB+mqZx5mwC9Vu6Fgyvu0
MD5:	5A9209280CCD4FA03CBFEEFE839A4D7A
SHA1:	E1900474FC6C6795AD11DDF954CEC59422F0D82D
SHA-256:	6CEC6CF1E1CBDB30785696B5B5585EFA836443089855CFF237BF3AA72B777E90
SHA-512:	CE8A0FE01772AEFA10DD5F6589171AD80D9D06A1ADD519A196ECCCD86FDB156B82896FEFA6109EEA4E9586E59F51F6C7CDB53E2C606F18716E9AC7EDE474BDA4
Malicious:	false
Preview:	mozLz40.......{"version":["ses....restore",1],"windows":[{"tab..bentrie...}url":"about:home","title":"New Tab","cacheKey":0,"ID":7,"docshellUUID":"{2051b36c-d13b-40c8-ad30-d546fb3b845e}","resultPrincipalURI":null,"p....ToInherit_base64":"{\"0\":...\"moz-null4...:{b0dc15ea-c354-4375-b6b0-5a756f870af6}\"}}","hasUserInteractA...false,"triggeringP\.....3...E..6docIdentifier":8,"persist":true}],"lastAccessed":1737401664570,"hiddey..searchMode...userContextId\|..attribut....{},"index":1,"requestedI..p0,"imag....chrome://branding/cU..nt/icon32.png"..aselect...,"_closedT5.@],"_...C....GroupCount":-1,"busy...r...Flags":2167541758....dth":1164,"height":891,"screenX":4...Y..Aizem..."maximized"...BeforeMin...&..workspace...."ef4daec1-3482-49fb-8+.@0034<..9e1a","zB..1...WH..j........E..:..{.1":{..jUpdate.....wtartTim..P21804...centCrash...0},"global..Dcook.. hoa..."addons.mozilla.org","valu...A3bdb2d82ca664bd9afcdd6fd1aa40c90d743edc508caf9a55bbff4cde0404c2f","path":"/","na..a"taarI\|.Recure...,"httpo

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\targeting.snapshot.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4537
Entropy (8bit):	5.039657861375719
Encrypted:	false
SSDEEP:	48:YrSAYSoi4UQZpExB1+anO1WYVhmpVRWszzc8ZYMsku7f86SLAVL7L35FtsfAcbyk:ycSoi0TEr5lEszzcNvbw6Kkrzrc2Rn27
MD5:	2789A7DDD469AC1466A6D43E20ED9EF9
SHA1:	3465D5026FC517F4F35A4443FC2CAD185DD2EDDE
SHA-256:	79CF85559FDCC734C749ED0648CDEBB46842E1E3A1704C16BF1645604C3C9C07
SHA-512:	A088FCFCDFCA4ABCA680B8BE38B84A7C4228C59E69D288D59B688F56431C515BCFE3450C21A5B9750BB546354D3710386294633AB5D3485EB264F650A3A944FB
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2025-01-20T19:33:58.726Z","profileAgeCreated":1696585565409,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\targeting.snapshot.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4537
Entropy (8bit):	5.039657861375719
Encrypted:	false
SSDEEP:	48:YrSAYSoi4UQZpExB1+anO1WYVhmpVRWszzc8ZYMsku7f86SLAVL7L35FtsfAcbyk:ycSoi0TEr5lEszzcNvbw6Kkrzrc2Rn27
MD5:	2789A7DDD469AC1466A6D43E20ED9EF9
SHA1:	3465D5026FC517F4F35A4443FC2CAD185DD2EDDE
SHA-256:	79CF85559FDCC734C749ED0648CDEBB46842E1E3A1704C16BF1645604C3C9C07
SHA-512:	A088FCFCDFCA4ABCA680B8BE38B84A7C4228C59E69D288D59B688F56431C515BCFE3450C21A5B9750BB546354D3710386294633AB5D3485EB264F650A3A944FB
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2025-01-20T19:33:58.726Z","profileAgeCreated":1696585565409,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3972)
Category:	downloaded
Size (bytes):	3977
Entropy (8bit):	5.850976510963659
Encrypted:	false
SSDEEP:	96:rnQCHlis0Fd66666Hf7JCWVSypzfW77tPKZe9ybdczLqoQffffo:rnH4Fd66666Hf7JCW1NfwKZe9Ucp
MD5:	2D570176917A751169695517E09F93CB
SHA1:	78809DB8657FFB7E15C1DB9002B161DA4188C97A
SHA-256:	5F94B4A25B4C9CC3AB138CEF8E7E69DFA4DE6C4C21851423A39373457BD6DFA4
SHA-512:	4DB869705DB8C0F33A153A610C8C474F855CB6E41F319D2E3C8180BC1CD075C84EDEC55D9A46028C93F1538ACBE26EE0355CD9B9590009C0E7B05CBBB2AB05E1
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["the hunting party nbc review","illinois basketball","amazon ordered to notify purchasers of hazardous products and issue refunds","ps5 games","tiktok alternative apps","winter storm snow forecast","houston half marathon results","dogecoin"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2410)
Category:	downloaded
Size (bytes):	175017
Entropy (8bit):	5.547141709627909
Encrypted:	false
SSDEEP:	3072:ZzKYRicPAENEJ8X5rpzKSoi5O4NmHha+q5ByukhCOWomLCHiYyKfQ1fbK0jOJv6B:ZzKYRPAENEJ+pKSoUO4NmHhbq5ByukhM
MD5:	DE73B70C2E96AA995C1D89F9DE01D399
SHA1:	D72592A0BF7FC706B4063B146FA0F505D9598E37
SHA-256:	47051D5F0947B959605CA98298809213203547BD992E9EC13557B40547F5228F
SHA-512:	7C01A3EC31D67C79BDBFFCF166E8F61DFED6EBCEF56F0BBFAE4EFAA363E0F797E397C054183AC16515F1AA34B1C6E19ABB2EBF3F9C5CA85EEAE9B173D657028B
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.WSo7OLdFZck.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTu3OIbomB3nx1wiDyRkhdiMoOpjsA"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Zi=function(a){if(4&a)return 4096&a?4096:8192&a?8192:0};_.$i=class extends _.Q{constructor(a){super(a)}};.}catch(e){_._DumpException(e)}.try{._.aj=function(a,b,c){a=_.vb(a,b,c);return Array.isArray(a)?a:_.Cc};_.bj=function(a,b){a=2&b?a\|2:a&-3;return(a\|32)&-2049};_.cj=function(a,b){a===0&&(a=_.bj(a,b));return a\|1};_.dj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.ej=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.fj=function(a,b,c,d,e,f,g){a=a.ha;var h=!!(2&b);const k=h?1:e;f=!!f;g&&(g=!h);e=_.aj(a,b,d);var l=e[_.v]\|0;h=!!(4&l);if(!h){l=_.cj(l,b);var n=e,p=l,r=b;(l=!!(2&p))&&(r\|=2);var q=!l;let x=!0,D=0,C=0;for(;D<n.length;D++){const H=_.Xa(n[D],c,r);if(H instanceof c){if(!l){const M=_.Ba(H.ha);q&&(q=!M);x&&(x=M)}n[C++]=H}}C<D&&(n.length=C);c=p\|4;p=x?c\|16:c&-17;p=q?p\|8:p&-9;n[_.v]=p;l&&Object.freeze(n);l=p}if(g&&!(8&l\|\|!e.length&&(k===1\|\|k===4&&32&l))){_.dj(l)&&(e=_.Ea(e),l=_.bj(l,b),b=_.ub(a,b,d,e));g=.e;c=l;for(n=0;n<g

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	133103
Entropy (8bit):	5.434156923330998
Encrypted:	false
SSDEEP:	3072:fAkAu9kJGkLpS+QVHTZxKtuj1MoDI7VW2i6e:fsueFS7jxKtuj1Mo07VW8e
MD5:	4B24E70045969DA46944BEEA21D96CC1
SHA1:	D348E98A698E4AC8837C6FC6CC32B789C4845F5F
SHA-256:	372CF40455CDA4AA39552400CC68C6CBC806FBDA3A4EAF9239258E540E2A3EB7
SHA-512:	0F672B219BE9F1300D6B82A4826EDB9F6BB8916E50D2588FBAB5174039BC2B0632411F86445B01932E909FA58C2F43D5633235AA9F1F8A1D33264E6957D88E93
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Pd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_kd gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1395)
Category:	downloaded
Size (bytes):	117446
Entropy (8bit):	5.490775275046353
Encrypted:	false
SSDEEP:	3072:T2yvefrtJUEgK3Cvw3wWs/ZuTZVL/G1kL:T2y4tJbDK0L/G1kL
MD5:	942EA4F96889BAE7D3C59C0724AB2208
SHA1:	033DDF473319500621D8EBB6961C4278E27222A7
SHA-256:	F59F7F32422E311462A6A6307D90CA75FE87FA11E6D481534A6F28BFCCF63B03
SHA-512:	C3F27662D08AA00ECBC910C39F6429C2F4CBC7CB5FC9083F63390047BACAF8CD7A83C3D6BBE7718F699DAE2ADA486F9E0CAED59BC3043491EECD9734EC32D92F
Malicious:	false
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.l2ZUC8FxqV8.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9xAAkaXO7Lqf7-9uTpZLtrkpWaXQ/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.CEsjJf2wziM.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTvDtorsWuiBHYzP5-lS7pwgoAa95g"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Static File Info

General

File type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy (8bit):	6.2233610826718175
TrID:	Win64 Dynamic Link Library (generic) (102004/3) 86.43% Win64 Executable (generic) (12005/4) 10.17% Generic Win/DOS Executable (2004/3) 1.70% DOS Executable Generic (2002/1) 1.70% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.01%
File name:	mscoree.dll
File size:	155'136 bytes
MD5:	ba5704d005e8c378dc48bdbcb00c1314
SHA1:	b78f573f5ae8684cc5a5b12f2827c0cee2a309d7
SHA256:	a197804c6ae915f59add068e862945b79916c92a508c0287a97db718e72280a3
SHA512:	405fc5d79e142afa73f1f222fcfe51f141c11f963fb1210403fef5fc71e4e27882dfd3e570a3d4b287523d887f1ccaa3e417a374c46667ddaa376618987248e7
SSDEEP:	3072:m0YhqR9KYu+3NECvc+aSQmc0WrazySJeNg:m036YrqCk+QwWGY
TLSH:	4FE37D17B7A900B7E1779278C9534A06F773B8111B609B5F03A4437A2F27391AE3EB61
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......#o~)g..zg..zg..z,v.{b..z,v.{...zrq.{G..zrq.{h..zrq.{n..z,v.{k..z,v.{f..z,v.{k..z_..{b..zg..z...z_..{u..z_..{f..zRichg..z.......

File Icon


Icon Hash:	7ae282899bbab082

Static PE Info

General

Entrypoint:	0x180005344
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x180000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, DLL
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x6730D3F0 [Sun Nov 10 15:40:32 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	c3d7031246cfa3dca70783d77d2109f2

Entrypoint Preview

Instruction
dec eax
mov dword ptr [esp+08h], ebx
dec eax
mov dword ptr [esp+10h], esi
push edi
dec eax
sub esp, 20h
dec ecx
mov edi, eax
mov ebx, edx
dec eax
mov esi, ecx
cmp edx, 01h
jne 00007FE214D86AD7h
call 00007FE214D86AF4h
dec esp
mov eax, edi
mov edx, ebx
dec eax
mov ecx, esi
dec eax
mov ebx, dword ptr [esp+30h]
dec eax
mov esi, dword ptr [esp+38h]
dec eax
add esp, 20h
pop edi
jmp 00007FE214D86964h
int3
int3
int3
dec eax
mov dword ptr [esp+18h], ebx
push ebp
dec eax
mov ebp, esp
dec eax
sub esp, 30h
dec eax
mov eax, dword ptr [0001FC78h]
dec eax
mov ebx, 2DDFA232h
cdq
sub eax, dword ptr [eax]
add byte ptr [eax+3Bh], cl
ret
jne 00007FE214D86B46h
dec eax
and dword ptr [ebp+10h], 00000000h
dec eax
lea ecx, dword ptr [ebp+10h]
call dword ptr [00013EE2h]
dec eax
mov eax, dword ptr [ebp+10h]
dec eax
mov dword ptr [ebp-10h], eax
call dword ptr [00013DD4h]
mov eax, eax
dec eax
xor dword ptr [ebp-10h], eax
call dword ptr [00013E08h]
mov eax, eax
dec eax
lea ecx, dword ptr [ebp+18h]
dec eax
xor dword ptr [ebp-10h], eax
call dword ptr [00013EB0h]
mov eax, dword ptr [ebp+18h]
dec eax
lea ecx, dword ptr [ebp-10h]
dec eax
shl eax, 20h
dec eax
xor eax, dword ptr [ebp+18h]
dec eax
xor eax, dword ptr [ebp-10h]
dec eax
xor eax, ecx
dec eax
mov ecx, FFFFFFFFh

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x234c4	0xb4	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x27000	0x1434	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x2a000	0x674	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x21bc0	0x38	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x21a80	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x19000	0x4d8	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x176c0	0x17800	2413a863ee26902cc6b062bf42d72463	False	0.5950693982712766	data	6.523189979848336	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x19000	0xb38c	0xb400	06255118973783febb7153770b546bb6	False	0.4644314236111111	data	5.022582334776907	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x25000	0x1ec8	0xe00	270a52be33d962ca68c9573fab3f3d09	False	0.22628348214285715	DOS executable (block device driver \322f\324\377\3772)	2.661736923757297	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x27000	0x1434	0x1600	c21ea8715c5ca440ad3caa13e5449d2d	False	0.4524147727272727	data	4.879748185459338	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
_RDATA	0x29000	0x15c	0x200	b33457339cc830c9147dcd831e4db8e1	False	0.390625	data	2.7775686036629077	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x2a000	0x674	0x800	b7489147a2fc1ec04fafc139e01ff6bb	False	0.51806640625	data	4.931441871830331	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Imports

DLL	Import
libcrypto-3-x64.dll	ERR_clear_error, ERR_error_string, OPENSSL_init_crypto, ERR_get_error
libssl-3-x64.dll	SSL_CTX_new, SSL_set_fd, SSL_new, SSL_CTX_set_options, TLS_method, OPENSSL_init_ssl, SSL_connect, SSL_get_error, SSL_read, SSL_write, SSL_CTX_free, SSL_free, SSL_ctrl
IPHLPAPI.DLL	GetAdaptersInfo
WS2_32.dll	closesocket, send, recv, getsockopt, inet_addr, socket, connect, htons, ioctlsocket, setsockopt, inet_ntoa, gethostbyname, getsockname, ntohs, __WSAFDIsSet, select, WSAStartup, WSAGetLastError
DNSAPI.dll	DnsQueryConfig
KERNEL32.dll	FlushFileBuffers, HeapSize, SetStdHandle, GetStringTypeW, WriteFile, GetProcessHeap, FreeEnvironmentStringsW, SetFilePointerEx, GetConsoleOutputCP, GetEnvironmentStringsW, GetCommandLineW, GetConsoleMode, GetCPInfo, GetOEMCP, GetACP, IsValidCodePage, FindNextFileW, FindFirstFileExW, FindClose, GetFileType, GetStdHandle, LCMapStringW, GetCommandLineA, GetModuleHandleA, Sleep, GetProcAddress, HeapCreate, HeapFree, lstrlenA, HeapAlloc, lstrcpyA, CreateThread, ExitProcess, lstrcpynA, VirtualFree, VirtualAlloc, GetSystemInfo, VirtualQuery, VirtualProtect, GetCurrentProcess, Thread32Next, Thread32First, GetCurrentThreadId, SuspendThread, ResumeThread, CreateToolhelp32Snapshot, GetLastError, HeapReAlloc, CloseHandle, GetThreadContext, GetCurrentProcessId, GetModuleHandleW, FlushInstructionCache, SetThreadContext, OpenThread, OpenEventA, CreateMutexA, WaitForSingleObject, SetEvent, CreateEventA, lstrcmpA, GetModuleFileNameW, lstrcatA, GetEnvironmentVariableW, GetFileAttributesW, lstrcatW, WideCharToMultiByte, CreateFileW, WriteConsoleW, lstrlenW, MultiByteToWideChar, FlsFree, FlsSetValue, QueryPerformanceCounter, GetSystemTimeAsFileTime, InitializeSListHead, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, IsDebuggerPresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetStartupInfoW, IsProcessorFeaturePresent, RtlUnwindEx, InterlockedFlushSList, SetLastError, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, LoadLibraryExW, EncodePointer, RaiseException, RtlPcToFileHeader, TerminateProcess, GetModuleHandleExW, FlsAlloc, FlsGetValue
ADVAPI32.dll	RegQueryInfoKeyA, RegOpenKeyExA, RegEnumValueA, RegCloseKey
ole32.dll	CoCreateInstance, CoInitialize

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 20, 2025 18:51:49.376763105 CET	49677	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:51:49.376820087 CET	49676	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:51:49.378746986 CET	49678	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:04.412957907 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.412997007 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:04.413259029 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.413892984 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.413904905 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:04.691437960 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.691546917 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:04.692161083 CET	49713	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.692209005 CET	443	49713	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:04.692210913 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.692295074 CET	49713	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.692507982 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.692545891 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:04.692852020 CET	49713	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.692867994 CET	443	49713	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:04.707043886 CET	49714	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.707139969 CET	443	49714	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:04.707484007 CET	49714	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.707715034 CET	49714	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:04.707750082 CET	443	49714	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:04.754542112 CET	49675	443	192.168.2.17	204.79.197.203
Jan 20, 2025 18:52:05.063832045 CET	49675	443	192.168.2.17	204.79.197.203
Jan 20, 2025 18:52:05.068104982 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.068351984 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.068363905 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.069238901 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.069322109 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.070319891 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.070374966 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.070467949 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.070473909 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.111893892 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.339143991 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.339394093 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.339413881 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.340969086 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.341037989 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.341346025 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.341428995 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.341484070 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.349143028 CET	443	49713	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.349659920 CET	49713	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.349673033 CET	443	49713	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.351141930 CET	443	49713	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.351470947 CET	49713	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.351581097 CET	49713	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.351675034 CET	443	49713	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.352076054 CET	49713	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.357429028 CET	443	49714	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.357676029 CET	49714	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.357697010 CET	443	49714	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.358755112 CET	443	49714	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.359849930 CET	49714	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.360199928 CET	49714	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.360268116 CET	443	49714	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.383372068 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.393865108 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.393884897 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.393892050 CET	49713	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.393914938 CET	443	49713	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.402796030 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.402841091 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.402884007 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.402899027 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.402909994 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.402920008 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.402997017 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.403011084 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.403100014 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.403418064 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.403883934 CET	49709	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.403898001 CET	443	49709	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.408858061 CET	49714	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.408876896 CET	443	49714	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.439865112 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.439944983 CET	49713	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.455899954 CET	49714	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.650305986 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.650372982 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.650418043 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.650424957 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.650445938 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.650489092 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.650496006 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.656145096 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.656213045 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.656250000 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.657974958 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.658003092 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.661864996 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.662059069 CET	443	49713	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.663022995 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.663039923 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.666048050 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.666259050 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.666275978 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.666645050 CET	443	49713	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.669732094 CET	49713	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.671710968 CET	49713	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.671730042 CET	443	49713	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.672938108 CET	49675	443	192.168.2.17	204.79.197.203
Jan 20, 2025 18:52:05.718888044 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.736061096 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.740557909 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.740720987 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.743705988 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.743742943 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.743824959 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.745249033 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.751411915 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.751475096 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.751488924 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.757976055 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.758016109 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.758037090 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.758054972 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.758107901 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.764044046 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.770498991 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.770534039 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.770565987 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.770598888 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.770651102 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.775954962 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.781524897 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.781560898 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.781634092 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.781657934 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.781877041 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.787420034 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.792949915 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.792992115 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.793008089 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.793021917 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.793077946 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.800725937 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.831068039 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.831134081 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.831173897 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.831217051 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.831260920 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.831939936 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.832024097 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.835798979 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.838510990 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.838541031 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.838624954 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.838747978 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.841535091 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.847152948 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.847193003 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.847232103 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.847246885 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.847307920 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.853010893 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.858263969 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.858318090 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.858984947 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.859009027 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.859260082 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.884289980 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.884383917 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.884430885 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.884440899 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.884480953 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.884538889 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.884553909 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.884605885 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.884658098 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.884701014 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.884756088 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.884839058 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.884854078 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.884906054 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.888559103 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.892441988 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.892477036 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.892514944 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.892530918 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.892580032 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.897346020 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.901148081 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.901191950 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.901209116 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.901232958 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.901282072 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.904530048 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.908474922 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.908514023 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.908590078 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.908636093 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.908694983 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.912218094 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.916083097 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.916130066 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.916148901 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.916182995 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.916240931 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.918484926 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.921578884 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.921638012 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.921650887 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.921662092 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.921705961 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.923074007 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.925369978 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.925406933 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.925487995 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.925498009 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.925539970 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.927680016 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.930291891 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.930337906 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.930356979 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.930370092 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.930412054 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.932348013 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.934616089 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.934664011 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.934678078 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.934691906 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.934741974 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.936975002 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.937072039 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.937159061 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.937165976 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.937186003 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:05.937540054 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.937680960 CET	49712	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:05.937696934 CET	443	49712	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:06.377846956 CET	49721	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:06.377893925 CET	443	49721	35.190.72.216	192.168.2.17
Jan 20, 2025 18:52:06.378433943 CET	49721	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:06.383532047 CET	49721	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:06.383546114 CET	443	49721	35.190.72.216	192.168.2.17
Jan 20, 2025 18:52:06.888343096 CET	49675	443	192.168.2.17	204.79.197.203
Jan 20, 2025 18:52:06.947576046 CET	443	49721	35.190.72.216	192.168.2.17
Jan 20, 2025 18:52:06.949037075 CET	49721	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:06.959060907 CET	49721	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:06.959060907 CET	49721	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:06.959079981 CET	443	49721	35.190.72.216	192.168.2.17
Jan 20, 2025 18:52:06.959434986 CET	443	49721	35.190.72.216	192.168.2.17
Jan 20, 2025 18:52:06.961328030 CET	49721	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:07.440658092 CET	49723	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:07.445460081 CET	53	49723	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:07.445524931 CET	49723	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:07.445573092 CET	49723	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:07.445585966 CET	49723	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:07.450367928 CET	53	49723	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:07.450377941 CET	53	49723	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:07.455928087 CET	49723	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:07.503443003 CET	53	49723	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:07.953537941 CET	53	49723	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:07.956309080 CET	49723	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.373966932 CET	49727	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:08.379929066 CET	80	49727	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:08.380959034 CET	49727	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:08.381232977 CET	49727	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:08.386951923 CET	80	49727	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:08.443032026 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:08.443074942 CET	443	49729	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:08.443172932 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:08.443347931 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:08.443360090 CET	443	49729	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:08.715362072 CET	49730	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:08.715418100 CET	443	49730	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:08.715780020 CET	49730	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:08.717423916 CET	49730	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:08.717448950 CET	443	49730	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:08.758961916 CET	49731	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:08.759001970 CET	443	49731	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:08.759073973 CET	49731	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:08.761214018 CET	49731	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:08.761236906 CET	443	49731	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:08.764394045 CET	49732	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:08.764430046 CET	443	49732	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:08.764688015 CET	49732	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:08.764841080 CET	49732	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:08.764851093 CET	443	49732	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:08.826986074 CET	80	49727	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:08.827241898 CET	49727	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:08.832252026 CET	80	49727	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:08.832354069 CET	49727	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:08.898401976 CET	49680	443	192.168.2.17	20.189.173.13
Jan 20, 2025 18:52:08.945929050 CET	49733	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:08.945960999 CET	443	49733	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:08.949270964 CET	49733	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:08.949440002 CET	49733	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:08.949457884 CET	443	49733	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:09.114672899 CET	49734	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:09.119565964 CET	80	49734	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:09.126173019 CET	49734	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:09.126231909 CET	49734	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:09.131016970 CET	80	49734	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:09.180895090 CET	443	49729	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:09.181170940 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:09.181190014 CET	443	49729	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:09.181735992 CET	443	49729	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:09.181848049 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:09.182737112 CET	443	49729	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:09.182786942 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:09.184039116 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:09.184120893 CET	443	49729	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:09.184216022 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:09.184216022 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:09.184233904 CET	443	49729	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:09.205897093 CET	49680	443	192.168.2.17	20.189.173.13
Jan 20, 2025 18:52:09.235974073 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:09.289954901 CET	443	49730	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.290054083 CET	49730	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.296442986 CET	49730	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.296490908 CET	443	49730	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.296633005 CET	49730	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.296681881 CET	443	49730	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.296747923 CET	49730	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.297168970 CET	49735	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.297254086 CET	443	49735	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.297674894 CET	49735	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.298861980 CET	49675	443	192.168.2.17	204.79.197.203
Jan 20, 2025 18:52:09.299149036 CET	49735	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.299185038 CET	443	49735	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.328675032 CET	443	49732	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:09.328759909 CET	49732	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:09.332304001 CET	49732	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:09.332330942 CET	443	49732	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:09.332672119 CET	443	49732	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:09.335690022 CET	49732	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:09.335809946 CET	49732	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:09.335915089 CET	443	49732	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:09.335967064 CET	49732	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:09.349256039 CET	443	49731	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.359005928 CET	49731	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.365835905 CET	49731	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.365849972 CET	443	49731	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.366000891 CET	49731	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.366077900 CET	443	49731	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.366413116 CET	49736	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.366450071 CET	443	49736	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.367449999 CET	49731	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.367481947 CET	49736	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.368947029 CET	49736	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.368963957 CET	443	49736	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.398597956 CET	443	49729	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:09.401048899 CET	443	49729	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:09.401359081 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:09.402518034 CET	49729	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:09.402535915 CET	443	49729	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:09.469866037 CET	443	49733	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:09.473159075 CET	49733	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.476634026 CET	49733	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.476648092 CET	443	49733	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:09.476890087 CET	443	49733	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:09.479182959 CET	49733	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.479271889 CET	49733	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.479372025 CET	443	49733	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:09.479666948 CET	49737	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.479705095 CET	443	49737	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:09.479795933 CET	49737	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.479801893 CET	49733	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.479993105 CET	49737	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.480003119 CET	443	49737	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:09.573374033 CET	80	49734	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:09.628885031 CET	49734	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:09.767349958 CET	443	49735	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.769221067 CET	49735	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.778453112 CET	49735	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.778487921 CET	443	49735	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.779026031 CET	443	49735	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.786361933 CET	49735	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.786382914 CET	443	49735	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.786665916 CET	49735	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.807969093 CET	49680	443	192.168.2.17	20.189.173.13
Jan 20, 2025 18:52:09.860480070 CET	443	49736	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.861723900 CET	49736	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.882391930 CET	49736	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.882427931 CET	443	49736	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.882499933 CET	49736	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.882565975 CET	443	49736	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:09.882656097 CET	49736	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:09.954205990 CET	443	49737	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:09.954288960 CET	49737	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.959362984 CET	49737	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.959377050 CET	443	49737	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:09.959572077 CET	443	49737	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:09.962690115 CET	49737	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.962807894 CET	443	49737	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:09.962810040 CET	49737	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:09.962817907 CET	443	49737	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:10.167331934 CET	443	49737	34.160.144.191	192.168.2.17
Jan 20, 2025 18:52:10.167398930 CET	49737	443	192.168.2.17	34.160.144.191
Jan 20, 2025 18:52:10.260685921 CET	49734	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:10.265712976 CET	80	49734	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:10.265855074 CET	49734	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:10.428539991 CET	49738	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:10.428575039 CET	443	49738	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:10.429517984 CET	49738	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:10.429833889 CET	49738	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:10.429846048 CET	443	49738	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:10.523449898 CET	49739	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:10.523492098 CET	443	49739	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:10.523634911 CET	49739	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:10.525082111 CET	49739	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:10.525111914 CET	443	49739	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:10.527283907 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:10.532155037 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:10.532268047 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:10.532432079 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:10.537200928 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:10.583878040 CET	49741	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:10.583913088 CET	443	49741	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:10.584223032 CET	49741	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:10.585741997 CET	49741	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:10.585756063 CET	443	49741	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:11.003038883 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:11.009167910 CET	443	49739	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:11.015328884 CET	443	49739	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:11.022924900 CET	49680	443	192.168.2.17	20.189.173.13
Jan 20, 2025 18:52:11.023257971 CET	49739	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:11.029531956 CET	49739	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:11.029544115 CET	443	49739	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:11.029736042 CET	49739	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:11.029769897 CET	443	49739	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:11.029890060 CET	49739	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:11.030215025 CET	49742	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:11.030256987 CET	443	49742	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:11.030330896 CET	49742	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:11.032207012 CET	49742	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:11.032217979 CET	443	49742	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:11.054940939 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:11.082393885 CET	443	49738	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:11.086328030 CET	49738	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:11.086360931 CET	443	49738	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:11.086730003 CET	443	49738	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:11.087348938 CET	49738	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:11.087412119 CET	443	49738	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:11.087670088 CET	49738	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:11.087685108 CET	49738	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:11.087697029 CET	443	49738	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:11.090600967 CET	443	49741	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:11.092655897 CET	49741	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:11.099193096 CET	49741	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:11.099215984 CET	443	49741	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:11.099308014 CET	49741	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:11.099409103 CET	443	49741	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:11.099493980 CET	49741	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:11.404342890 CET	443	49738	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:11.409888029 CET	443	49738	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:11.410232067 CET	49738	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:11.410777092 CET	49738	443	192.168.2.17	142.250.185.142
Jan 20, 2025 18:52:11.410801888 CET	443	49738	142.250.185.142	192.168.2.17
Jan 20, 2025 18:52:11.511420012 CET	443	49742	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:11.511504889 CET	49742	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:11.517635107 CET	49742	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:11.517648935 CET	443	49742	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:11.517756939 CET	49742	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:11.517810106 CET	443	49742	34.117.188.166	192.168.2.17
Jan 20, 2025 18:52:11.517903090 CET	49742	443	192.168.2.17	34.117.188.166
Jan 20, 2025 18:52:11.713527918 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:11.915505886 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:11.971333027 CET	49744	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:12.237890959 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:12.654943943 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:12.654958963 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:12.654968977 CET	80	49744	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:12.654978991 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:12.655050993 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:12.655098915 CET	49744	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:12.655235052 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:12.656687975 CET	49745	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:12.656761885 CET	443	49745	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:12.656810999 CET	49746	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:12.656836033 CET	443	49746	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:12.656955957 CET	49745	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:12.656984091 CET	49746	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:12.657061100 CET	49745	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:12.657075882 CET	443	49745	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:12.657140970 CET	49746	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:12.657146931 CET	443	49746	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:12.659961939 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:12.745383978 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:12.792903900 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:13.100502014 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:13.118911028 CET	443	49745	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:13.122947931 CET	49745	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:13.127151012 CET	49745	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:13.127166033 CET	443	49745	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:13.127420902 CET	443	49745	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:13.130501032 CET	49745	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:13.130594969 CET	49745	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:13.130691051 CET	443	49745	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:13.130752087 CET	49745	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:13.141156912 CET	443	49746	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:13.144038916 CET	49746	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:13.147624969 CET	49746	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:13.147640944 CET	443	49746	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:13.147835016 CET	443	49746	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:13.150928020 CET	49746	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:13.151021957 CET	49746	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:13.151058912 CET	443	49746	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:13.152916908 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:13.152945042 CET	49746	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:13.437980890 CET	49680	443	192.168.2.17	20.189.173.13
Jan 20, 2025 18:52:14.101557970 CET	49675	443	192.168.2.17	204.79.197.203
Jan 20, 2025 18:52:15.322722912 CET	443	49714	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:15.322782993 CET	443	49714	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:15.322849989 CET	49714	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:16.357682943 CET	49748	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:16.357731104 CET	443	49748	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:16.357959986 CET	49748	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:16.359414101 CET	49748	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:16.359430075 CET	443	49748	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:16.363271952 CET	49749	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:16.363308907 CET	443	49749	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:16.364044905 CET	49749	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:16.364113092 CET	49749	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:16.364121914 CET	443	49749	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:16.377816916 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:16.381712914 CET	49750	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:16.381748915 CET	443	49750	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:16.382533073 CET	49750	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:16.382662058 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:16.385132074 CET	49750	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:16.385158062 CET	443	49750	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:16.385274887 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:16.390065908 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:16.484023094 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:16.500063896 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:16.535003901 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:16.550033092 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:16.607356071 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:16.612324953 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:16.702032089 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:16.751936913 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:16.829368114 CET	443	49749	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:16.829483986 CET	49749	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:16.829823017 CET	443	49748	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:16.829898119 CET	49748	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:16.843414068 CET	49749	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:16.843430996 CET	443	49749	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:16.843677044 CET	443	49749	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:16.849010944 CET	443	49750	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:16.849577904 CET	49749	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:16.849605083 CET	49749	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:16.849720955 CET	443	49749	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:16.849817038 CET	49750	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:16.850048065 CET	49749	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:16.852602005 CET	49748	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:16.852621078 CET	443	49748	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:16.852670908 CET	49748	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:16.852803946 CET	443	49748	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:16.852854967 CET	49748	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:16.854931116 CET	49750	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:16.854943037 CET	443	49750	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:16.854995012 CET	49750	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:16.855079889 CET	443	49750	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:16.855130911 CET	49750	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:17.116415024 CET	49714	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:52:17.116452932 CET	443	49714	142.250.186.36	192.168.2.17
Jan 20, 2025 18:52:17.349184990 CET	49682	80	192.168.2.17	192.229.211.108
Jan 20, 2025 18:52:17.575898886 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:17.580847979 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:17.584021091 CET	49751	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:17.584047079 CET	443	49751	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:17.584285021 CET	49751	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:17.586556911 CET	49751	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:17.586569071 CET	443	49751	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:17.664001942 CET	49682	80	192.168.2.17	192.229.211.108
Jan 20, 2025 18:52:17.672710896 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:17.726937056 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:17.750083923 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:17.754870892 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:17.844818115 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:17.884953022 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:18.057434082 CET	443	49751	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:18.057564020 CET	49751	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:18.242115974 CET	49680	443	192.168.2.17	20.189.173.13
Jan 20, 2025 18:52:18.272984982 CET	49682	80	192.168.2.17	192.229.211.108
Jan 20, 2025 18:52:18.884002924 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:18.888921022 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:18.910315990 CET	49744	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:18.913114071 CET	49751	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:18.913132906 CET	443	49751	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:18.913206100 CET	49751	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:18.913557053 CET	443	49751	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:18.915354013 CET	80	49744	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:18.915590048 CET	49751	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:18.915627956 CET	49744	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:18.978801012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:18.981976032 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:18.983226061 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:18.983412981 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:18.983602047 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:18.983625889 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:18.983799934 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:18.988693953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:18.989250898 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:18.989852905 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:18.989918947 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:18.989928961 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:18.989937067 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.019220114 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.021688938 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.021750927 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.021796942 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.024153948 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.026468039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.026499033 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.026602030 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.036936998 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.041697025 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.076775074 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.077114105 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.111063004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.111619949 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.111619949 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.124552011 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.129365921 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.163913012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.163927078 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.163938999 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.165149927 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.188815117 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.201829910 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.206654072 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.248014927 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:19.251409054 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.252809048 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:19.331432104 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.419526100 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.447669029 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.447684050 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.447695971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.447720051 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.447738886 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.447782040 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:19.447794914 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.447815895 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.447829008 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.447880030 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.447912931 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.447926044 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.447930098 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.447938919 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.447951078 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.447962046 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448049068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448060989 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448071957 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448084116 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448095083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448107004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448199034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448210955 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448220968 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448234081 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448245049 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448256969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448268890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448302984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448312998 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.448710918 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.448766947 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.448884964 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.452596903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.452636003 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.452816010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.452836037 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.452850103 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.452862978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.453721046 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.453732967 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.453746080 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.453758001 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.454453945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.454498053 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.454514027 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.454526901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.454807043 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.455266953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.465373993 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.466337919 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.468055964 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.481966019 CET	49682	80	192.168.2.17	192.229.211.108
Jan 20, 2025 18:52:19.496944904 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:19.519912958 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.567511082 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.567596912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.567625046 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.567768097 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.567790985 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.567821026 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.567846060 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.567887068 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.568206072 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.568756104 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.568787098 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.568814039 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.568857908 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.571736097 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.579601049 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.605226994 CET	49752	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:19.605252028 CET	443	49752	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:19.605545044 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.605684042 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.605696917 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.607851028 CET	49752	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:19.607873917 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.609364986 CET	49752	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:19.609376907 CET	443	49752	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:19.668127060 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.668145895 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.668159008 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.668297052 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.668311119 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.668544054 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.671124935 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.723537922 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.778146982 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.778163910 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.790699959 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.823463917 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.828310966 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.919604063 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.919622898 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.919644117 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.919655085 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:19.921798944 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.924407005 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:19.929557085 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.021645069 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.021661997 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.021693945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.021707058 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.021718979 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.021719933 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.021747112 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.021800041 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.022138119 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.022159100 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.022170067 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.022190094 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.022219896 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.022687912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.022700071 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.022711992 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.022725105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.022737980 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.022763014 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.023454905 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.023478031 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.023489952 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.023538113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.023662090 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.024271011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.024302006 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.024313927 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.024349928 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.024406910 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.024879932 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.025150061 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.025161982 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.025173903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.025186062 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.025974035 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.025984049 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.025995970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.026007891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.026740074 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.026761055 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.026773930 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.026787043 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.027643919 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.027654886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.027667046 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.027678013 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.028381109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.028405905 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.028417110 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.028450012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.029261112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.029273033 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.029283047 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.029294968 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.029961109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.029984951 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.029999018 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.030009985 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.030021906 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.030783892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.030797958 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.030808926 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.030822039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.030829906 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.031297922 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.031795025 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.032428026 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.034766912 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.039618969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.087907076 CET	443	49752	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:20.094537973 CET	49752	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:20.131222963 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.131453037 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:20.132010937 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.136224031 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:20.138864040 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.143635988 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.226152897 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:20.235008955 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235032082 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235045910 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235069990 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.235096931 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.235131979 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235143900 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235156059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235167980 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235217094 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.235297918 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.235336065 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235347986 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235359907 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235369921 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235377073 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.235383034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235420942 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.235471010 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.235635996 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235649109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235687971 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.235713005 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.235851049 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235862970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235874891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235893965 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235903978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235912085 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.235915899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235928059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.235939980 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.235965967 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.236063957 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.236076117 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.236085892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.236098051 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.236109018 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.236140966 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.236722946 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.236743927 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.236757040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.236777067 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.236789942 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.236815929 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.236848116 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.239850044 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.244668961 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.270953894 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:20.336045027 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.336064100 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.336087942 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.336100101 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.336118937 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.336222887 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.336234093 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.337548018 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.337745905 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.340462923 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.342617035 CET	49752	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:20.342638016 CET	443	49752	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:20.342755079 CET	49752	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:20.342953920 CET	443	49752	34.120.208.123	192.168.2.17
Jan 20, 2025 18:52:20.343008995 CET	49752	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:52:20.345319986 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.476712942 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.476783037 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.479279041 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.484118938 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.518224955 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:20.523113966 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:20.576067924 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576097012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576108932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576122999 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576175928 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.576190948 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576204062 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.576205015 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576229095 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576250076 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576250076 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.576261997 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576273918 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576282978 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.576316118 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.576323986 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576335907 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576347113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576360941 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.576370001 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.576401949 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.577147007 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.577158928 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.577169895 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.577179909 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.577193022 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.577203035 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.577203989 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.577217102 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.577227116 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.577229023 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.577244043 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.577279091 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.577671051 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.577682972 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.577693939 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.577724934 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.577754021 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.580360889 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.585175991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.614836931 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:20.662942886 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:20.754395962 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:20.754478931 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.756957054 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:20.761743069 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024367094 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024389982 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024401903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024414062 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024427891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024441004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024452925 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024463892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024476051 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024488926 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024543047 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024554014 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024564981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024575949 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024590969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024602890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024698019 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024709940 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024727106 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024739027 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024749994 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024760962 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024772882 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024784088 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024795055 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024806023 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.024817944 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025043964 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025057077 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025068045 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025079966 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025094032 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025168896 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025181055 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025192022 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025203943 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025216103 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025275946 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025315046 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.025593042 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.025655985 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.025682926 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.025712967 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.025959015 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.028896093 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.033802986 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.089776993 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:21.094677925 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:21.125485897 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.125511885 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.125524044 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.125685930 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.132005930 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.136852980 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.185149908 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:21.228393078 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.230767012 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.235955954 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:21.249025106 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.253940105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.362910032 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.362946033 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.362982035 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.363008022 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.365523100 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.370403051 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.462162971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.462182999 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.462229013 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.462255955 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.465064049 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.470180035 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.548835039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.548909903 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.561677933 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.561708927 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.561733961 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.561749935 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.561749935 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.561772108 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.561788082 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.561871052 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.561887980 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.561903954 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.561918020 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.561935902 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.561953068 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.561959982 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.561986923 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.561988115 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.561988115 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.562002897 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.562028885 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.562058926 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.565136909 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.570004940 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.661178112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.662379980 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.667838097 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.674524069 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768121004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768189907 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.768225908 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768241882 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768259048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768274069 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768274069 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.768292904 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768306017 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.768362999 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.768372059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768388033 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768407106 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768431902 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.768445015 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.768565893 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768582106 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768615961 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.768640995 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.768726110 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768740892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768757105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768776894 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.768815041 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.768908978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768923998 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768939972 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768955946 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.768959999 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.768989086 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.769012928 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.769387007 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.769438982 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.769575119 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.769589901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.769603968 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.769618034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.769620895 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.769634008 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.769648075 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.769650936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.769685984 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.769707918 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.769721031 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.769742012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.769757032 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.769766092 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.769774914 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.769797087 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.769829988 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.770370960 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770385981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770401001 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770422935 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.770457029 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.770534039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770549059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770584106 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.770611048 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.770684004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770699978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770714045 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770731926 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.770761013 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.770843983 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770860910 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770881891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770886898 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.770900011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.770939112 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.770972013 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.771517992 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771533012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771547079 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771560907 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771569967 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.771579027 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771594048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771611929 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.771647930 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.771672010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771687984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771720886 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.771759987 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.771847963 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771864891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771878958 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771893024 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.771897078 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.771939993 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.772696972 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.772715092 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.772730112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.772744894 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.772751093 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.772761106 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.772767067 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.772799969 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.772875071 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.772891045 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.772905111 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.772919893 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.772934914 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.772943020 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.772969007 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.772998095 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.773031950 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.773056030 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.773077011 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.773128033 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.775249958 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.781505108 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.885876894 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.885905981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.885922909 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.885940075 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.885946989 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.885958910 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.885973930 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.885979891 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886006117 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886029959 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886154890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886171103 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886225939 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886228085 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886243105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886256933 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886272907 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886274099 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886312962 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886342049 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886411905 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886461020 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886589050 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886604071 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886642933 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886643887 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886660099 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886667013 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886676073 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886679888 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886704922 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886725903 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886742115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886761904 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886786938 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886812925 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.886944056 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886961937 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886976004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886991978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.886996984 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.887017012 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.887052059 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.887624025 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.887639046 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.887655020 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.887674093 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.887693882 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.887778044 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.887793064 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.887809038 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.887831926 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.887857914 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.887932062 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.887947083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.887963057 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.887975931 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.887980938 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.888005018 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.888042927 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.889955044 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.892975092 CET	49682	80	192.168.2.17	192.229.211.108
Jan 20, 2025 18:52:21.894798994 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.986124039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.986144066 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.986160994 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.986186028 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.986202002 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:21.986352921 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.989038944 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:21.993881941 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086332083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086401939 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086406946 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.086426973 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086443901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086448908 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.086458921 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086468935 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.086474895 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086491108 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086498976 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.086522102 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.086543083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086565018 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.086568117 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086586952 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086594105 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.086602926 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.086622000 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.086659908 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.089644909 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.094554901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.198812962 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.199337959 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.199461937 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.203737974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.204235077 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.204268932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.204292059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.204406977 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.204545975 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.204636097 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.204705954 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.204833984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.204849005 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.205015898 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.209522009 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.209893942 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.210319042 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.210380077 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.210418940 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.210479975 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.210501909 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.210577011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.211797953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.211824894 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.211838961 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.211905003 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.211920977 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.211929083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.211951017 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.211966991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.211982965 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212276936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212338924 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212352991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212361097 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212404966 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212419033 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212434053 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212771893 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212798119 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212811947 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212865114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212879896 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212904930 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212918997 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212934971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.212948084 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213392019 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213408947 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213423014 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213449001 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213464022 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213478088 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213493109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213821888 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213840008 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213852882 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213867903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213948011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213963985 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213979006 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.213993073 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.220009089 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.222647905 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.222647905 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.223450899 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.223495007 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.290599108 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.290611982 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.290663958 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.293164968 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.339557886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.414403915 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.414434910 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.414443970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.414450884 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.414460897 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.414650917 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.417704105 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.422521114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.501022100 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.501090050 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.525737047 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.525755882 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.525768995 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.525804043 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.525835991 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.525836945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.525859118 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.525872946 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.525887012 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.525921106 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.525933981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.525944948 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.525950909 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.526004076 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526004076 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.526017904 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526031971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526043892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526057005 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.526103973 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.526113033 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526125908 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526137114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526176929 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.526204109 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.526631117 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526649952 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526663065 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526674986 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526681900 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.526700974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526721001 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.526771069 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.526856899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526878119 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526890993 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526917934 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.526952982 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526962042 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.526966095 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.526994944 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527009964 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.527054071 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.527086973 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527113914 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527132034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527147055 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527154922 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.527164936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527177095 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527187109 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.527189970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527239084 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.527848959 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527863026 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527884960 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527896881 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527910948 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527950048 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.527956963 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527973890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.527987003 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528086901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528099060 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528110981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528124094 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528125048 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.528139114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528502941 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.528532982 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.528784990 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528796911 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528810024 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528873920 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528886080 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528898001 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528914928 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.528995991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529009104 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529020071 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529031992 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529045105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529057026 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529745102 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529757023 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529784918 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529803991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529815912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529828072 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529892921 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529906034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529917955 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.529930115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530009985 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530021906 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530033112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530673981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530685902 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530706882 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530720949 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530774117 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530786037 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530798912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530811071 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530870914 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530881882 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530894041 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530910969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.530925035 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531610966 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531624079 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531636953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531658888 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531672001 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531683922 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531701088 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531793118 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531804085 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531816006 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531833887 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531847954 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.531860113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532587051 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532605886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532620907 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532633066 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532646894 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532659054 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532679081 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532691002 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532701969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532784939 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532798052 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532809973 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.532828093 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.533458948 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.533473015 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.534734011 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.534770966 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.534801960 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.534835100 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.534851074 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.534882069 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.534939051 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.612726927 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.612781048 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.612870932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.612893105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.612904072 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.612943888 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.612958908 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.612973928 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.612977982 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.612989902 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613013029 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613015890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613042116 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613054037 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613065958 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613090992 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613110065 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613140106 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613151073 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613152027 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613171101 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613176107 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613183975 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613208055 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613243103 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613275051 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613286972 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613296986 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613308907 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613318920 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613353968 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613387108 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613399029 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613409996 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613423109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613445044 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613471985 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613503933 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613514900 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613527060 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613538027 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613548040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613559961 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613599062 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613693953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613709927 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613722086 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613734007 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613743067 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613746881 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613759995 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613770962 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613782883 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613787889 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613840103 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613852024 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613863945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613873959 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613907099 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613919020 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613929987 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613930941 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613943100 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613955975 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.613961935 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.613996983 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614027977 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614058018 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614069939 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614088058 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614099026 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614109039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614111900 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614120960 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614132881 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614142895 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614154100 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614161968 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614192963 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614228964 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614231110 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614326954 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614339113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614348888 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614351988 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614361048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614372969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614381075 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614386082 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614433050 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614464045 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614475965 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614518881 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614550114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614562035 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614573956 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614587069 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614598036 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614613056 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614635944 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614639997 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614653111 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614670992 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614684105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614695072 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614696026 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614742994 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614773035 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614784956 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614797115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614809990 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614821911 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614825964 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614866972 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614869118 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614880085 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614892960 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614905119 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614917040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614928961 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614932060 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.614939928 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614948034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.614983082 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.615030050 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.615066051 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.615113020 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.615113020 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.615127087 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.615159988 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.615185976 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.615186930 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.615200043 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.615211010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.615221977 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.615241051 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.615279913 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.615295887 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.615308046 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.615325928 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.615338087 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.615349054 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.615385056 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.617645979 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.622450113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714361906 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714436054 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714453936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714466095 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714478970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714492083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714504004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714545965 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714557886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714569092 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714704037 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714715004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714725971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714776039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714787960 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714798927 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714809895 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714905024 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714915991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714926004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714939117 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.714951992 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715042114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715055943 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715068102 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715079069 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715089083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715101004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715111971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715168953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715182066 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715240002 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715250969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715261936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.715272903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.716049910 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.721853018 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.721888065 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.722012043 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.802256107 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.802334070 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.805104017 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.810664892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916460991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916490078 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916508913 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916520119 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916529894 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.916531086 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916538954 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916568041 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.916574955 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916587114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916610956 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916630030 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.916663885 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.916665077 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916683912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916696072 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916722059 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.916722059 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.916729927 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916749001 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.916778088 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916788101 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.916789055 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916801929 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916811943 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:22.916822910 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.916851044 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.920145988 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:22.924998045 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017075062 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017122030 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017142057 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017154932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017165899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017179966 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017293930 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017304897 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017316103 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017328024 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017343044 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017451048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017462969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017474890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017487049 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017498970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017512083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017523050 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017540932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017553091 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017563105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017575979 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017632008 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.017643929 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.025988102 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.026199102 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.026468039 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.033516884 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.040724039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133635044 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133656025 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133702993 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133723021 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133733988 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133754969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133826971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133837938 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133848906 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133860111 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133877993 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133896112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133951902 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.133965015 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134053946 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134064913 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134076118 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134094000 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134109974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134171963 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134188890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134249926 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134290934 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.134366989 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.134371996 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134407997 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.134439945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134453058 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134497881 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.134505987 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134516954 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134527922 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134546041 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.134553909 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134565115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134593964 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.134641886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134654045 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134656906 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.134665966 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134715080 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.134736061 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134747028 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134749889 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.134759903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134773016 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134814024 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.134870052 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.134916067 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134927034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134938955 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134952068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134963036 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134974957 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134988070 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.134998083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135011911 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135077953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135088921 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135101080 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135109901 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135113001 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135126114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135138035 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135149002 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135159969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135210991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135221004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135231972 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135255098 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135266066 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135276079 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135287046 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135299921 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135406971 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135410070 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135423899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135474920 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135582924 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135596037 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135606050 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135617018 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135626078 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135629892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135643005 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135643959 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135654926 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135667086 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135668993 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135678053 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135689974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135694027 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135700941 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135714054 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135721922 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135724068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135735989 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135740042 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135763884 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135797024 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135804892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135822058 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135835886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135890961 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135924101 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135935068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135945082 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135957956 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.135962963 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.135989904 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.136077881 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136090040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136101007 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136111975 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136121035 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.136122942 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136137962 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.136138916 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136154890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136163950 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136236906 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.136315107 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136327028 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136337996 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136348963 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136372089 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136383057 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136394978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136405945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136418104 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136430979 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136499882 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136512041 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136523008 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136629105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136640072 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136651039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136662960 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136674881 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136686087 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136698008 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136709929 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136722088 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136785984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136796951 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136807919 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136818886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136830091 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136841059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.136851072 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:23.137815952 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.137845039 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.137870073 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:23.718683958 CET	49675	443	192.168.2.17	204.79.197.203
Jan 20, 2025 18:52:24.235275984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235327005 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235340118 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235369921 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235368967 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.235395908 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235414982 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235425949 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235438108 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235452890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235457897 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.235457897 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.235457897 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.235459089 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.235462904 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235475063 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235490084 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235497952 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.235538960 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.235606909 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235619068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235629082 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235640049 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235656977 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235668898 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235682011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235693932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235708952 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235721111 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235739946 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235753059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235764980 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235776901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235793114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235814095 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.235846996 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.235877037 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235888958 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235901117 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235912085 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235924959 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.235949993 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.235977888 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236068964 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236080885 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236089945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236102104 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236114025 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236124992 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236135960 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236145973 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236149073 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236157894 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236171007 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236174107 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236183882 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236197948 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236197948 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236211061 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236217976 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236222982 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236236095 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236248016 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236254930 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236262083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236279011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236303091 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236351967 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236486912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236496925 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236509085 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236521006 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236531973 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236546040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236551046 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236581087 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236609936 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236650944 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236663103 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236674070 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236685038 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236699104 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236699104 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236711025 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236723900 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236736059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236740112 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236762047 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236788988 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236818075 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236829996 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236840010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236850977 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236861944 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236874104 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236881018 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236901045 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236901999 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236913919 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236926079 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236938953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236948013 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.236951113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236962080 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236968040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236974001 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236979008 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236984968 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.236995935 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237008095 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237009048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237008095 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237023115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237034082 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237039089 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237051010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237057924 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237065077 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237076998 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237088919 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237101078 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237101078 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237118959 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237143040 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237178087 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237637997 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237649918 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237659931 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237672091 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237684011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237689018 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237695932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237710953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237723112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237730026 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237741947 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237751007 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237755060 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237767935 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237773895 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237780094 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237792015 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237803936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237811089 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237816095 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237827063 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237833977 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237839937 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237855911 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237867117 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237878084 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237888098 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237890959 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237904072 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237910032 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237915993 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237930059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237937927 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.237941027 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237953901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237965107 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.237978935 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238038063 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.238351107 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238362074 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238373041 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238382101 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238393068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238404989 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238415956 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238426924 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238436937 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238450050 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238461971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238481045 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238492012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238504887 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238522053 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238533974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238544941 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238555908 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238569975 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238580942 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238591909 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238603115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238615036 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238626957 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238637924 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238650084 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238660097 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238672018 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238684893 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238698006 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238709927 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238722086 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238733053 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238744974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238755941 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.238754988 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.238780975 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.238883972 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.238919020 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.238974094 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.239037991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.239206076 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.239748001 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.240485907 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240497112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240509033 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240520000 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240533113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240545034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240559101 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240616083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240636110 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240664005 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240675926 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240686893 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240698099 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240720034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240736961 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240750074 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240767002 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240780115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240789890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240802050 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240813017 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240825891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240930080 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240943909 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240962029 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240973949 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240986109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.240998030 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241009951 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241023064 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241031885 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241079092 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241080046 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241080046 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241122007 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241122007 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241122007 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241130114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241147995 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241167068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241175890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241177082 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241188049 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241199970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241210938 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241214037 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241225004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241238117 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241239071 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241245031 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241257906 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241265059 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241270065 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241290092 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241290092 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241291046 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241306067 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241318941 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241318941 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241341114 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241362095 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241374016 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241391897 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241395950 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241395950 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241405010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241417885 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241424084 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241424084 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241446018 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241449118 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241470098 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241471052 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241503000 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241513014 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241523981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241544962 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241555929 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241569996 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241590023 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241590977 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241590977 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241590977 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241621017 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241621017 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241646051 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241657972 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241677999 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241677999 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241688967 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241720915 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241734028 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241736889 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241781950 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241799116 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241810083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241859913 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241863966 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241877079 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241921902 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241939068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241949081 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.241959095 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241971016 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.241976023 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242002010 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242011070 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242023945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242022038 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242048979 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242049932 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242067099 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242074966 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242095947 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242125988 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242151976 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242162943 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242172956 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242183924 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242197037 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242202044 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242202044 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242209911 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242228985 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242230892 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242230892 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242240906 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242259026 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242285013 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242296934 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242307901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242316961 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242327929 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.242345095 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.242372036 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245428085 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245445967 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245457888 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245465040 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245471001 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245484114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245490074 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245493889 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245506048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245515108 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245515108 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245520115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245543957 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245558977 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245590925 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245603085 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245614052 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245625019 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245635033 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245635986 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245655060 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245661020 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245668888 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245680094 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245692968 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245697975 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245697975 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245745897 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245781898 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245793104 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245804071 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245815039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245836020 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245846987 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245857954 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245908022 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245929956 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245942116 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245951891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245954037 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.245965004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245987892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.245999098 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246010065 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246022940 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246031046 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246031046 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246064901 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246095896 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246124983 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246134996 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246145010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246156931 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246169090 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246176004 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246176004 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246182919 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246196032 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246202946 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246215105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246227980 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246232033 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246232033 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246241093 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246253014 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246259928 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246264935 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246283054 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246300936 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246309996 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246320963 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246331930 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246351957 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246351957 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246361971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246375084 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246377945 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246393919 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246398926 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246407032 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246416092 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246419907 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246438026 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246443987 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246443987 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246449947 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246463060 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246468067 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246494055 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246494055 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246545076 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246556044 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246567011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246577978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246594906 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246594906 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246603012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246615887 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246622086 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246628046 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246644974 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246670961 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246819973 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246833086 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246855021 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246876955 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246885061 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246896982 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246907949 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246917009 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246920109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246942043 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246953011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246956110 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.246967077 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246978998 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.246989012 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247080088 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247086048 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247092962 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247106075 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247118950 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247128010 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247132063 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247144938 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247158051 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247193098 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247231960 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247243881 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247255087 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247266054 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247277975 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247288942 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247292995 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247298002 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247302055 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247323036 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247328043 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247335911 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247349024 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247373104 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247384071 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247385979 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247395992 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247409105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247420073 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247420073 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247454882 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247457981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247472048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247482061 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247483015 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247494936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247504950 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247517109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247518063 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247550011 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247581005 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247587919 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247600079 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247617960 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247629881 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247633934 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247642040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247651100 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247688055 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247729063 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247740030 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247750044 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247761965 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247772932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247783899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247787952 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247816086 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247848988 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247848988 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247860909 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247872114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247884989 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247895002 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247898102 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247910976 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247934103 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247956038 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247967958 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247967958 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.247978926 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247989893 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.247994900 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248003006 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248027086 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248028040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248048067 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248053074 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248076916 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248089075 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248094082 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248101950 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248123884 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248147964 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248178959 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248191118 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248202085 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248213053 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248223066 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248224020 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248253107 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248281002 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248336077 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248347998 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248358011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248369932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248378038 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248380899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248393059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248404026 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248415947 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248416901 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248430014 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248435020 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248471022 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248475075 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248492002 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248505116 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248524904 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248552084 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248621941 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248634100 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248651981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248663902 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248673916 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248677015 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248688936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248699903 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248702049 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248714924 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248725891 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248727083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248739004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248749971 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248750925 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248763084 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248774052 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248776913 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248786926 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.248815060 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248842955 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.248966932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249013901 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249042034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249053955 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249066114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249085903 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249111891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249124050 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249124050 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249139071 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249147892 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249151945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249167919 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249177933 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249178886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249192953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249212980 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249237061 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249258995 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249270916 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249281883 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249293089 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249305010 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249330997 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249409914 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249422073 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249439955 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249450922 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249461889 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249463081 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249475956 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249484062 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249490976 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249515057 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249547005 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249572039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249583960 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249596119 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249608040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249619007 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249623060 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249666929 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249699116 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249705076 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249716043 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249727011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249732018 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249737978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249748945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249761105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249772072 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249783993 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249790907 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249821901 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249846935 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249857903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249871969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249882936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.249891996 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.249948978 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.250000954 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250014067 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250024080 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250035048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250046968 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250050068 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.250058889 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250071049 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250082970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250086069 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.250094891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250107050 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250109911 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.250118017 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250137091 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.250155926 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.250287056 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250303984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250339031 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250344992 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.250353098 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250371933 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.250384092 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.250396013 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250438929 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.250457048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250468969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250479937 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.250504017 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.250535011 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.252686977 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.299475908 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.348246098 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.348309040 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.351056099 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.355923891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.446964979 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.446989059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.447001934 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.447011948 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.447027922 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.447038889 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.447058916 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.447058916 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.447082996 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.447104931 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.447130919 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.450135946 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.454967022 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546307087 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546328068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546339989 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546351910 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546363115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546375036 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546375990 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.546401978 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.546452045 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.546670914 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546732903 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.546744108 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546757936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546768904 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546782017 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546792984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546803951 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546808958 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.546816111 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546824932 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.546828985 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546840906 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546853065 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546864033 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546869993 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.546876907 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.546880960 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.546905041 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.550998926 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.555843115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648154974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648173094 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648184061 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648205042 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648221970 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648226023 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648240089 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648253918 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648264885 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648277998 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648286104 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648298979 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648307085 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648309946 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648324013 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648336887 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648338079 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648366928 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648379087 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648391008 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648407936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648411036 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648422956 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648454905 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648473024 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648484945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648489952 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648497105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648510933 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648533106 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648550987 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648631096 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648643970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648655891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648667097 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648679018 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648684025 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648696899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648719072 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648720980 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648730993 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648746967 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648756027 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648767948 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648780107 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648788929 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648792982 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648804903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648818970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648824930 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648858070 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648860931 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648874044 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648885012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648897886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648904085 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648910999 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648924112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648962021 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.648982048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.648993969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.649003983 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.649015903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.649024010 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.649039030 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.649053097 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.649060965 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.649071932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.649082899 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.649122953 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.734810114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.734872103 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.737179041 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.741987944 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.836159945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.836188078 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.836199045 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.836236000 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.836261034 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.839046955 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.843846083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.935973883 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936000109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936012030 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936023951 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936038971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936038971 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.936052084 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936065912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936069012 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.936079025 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936091900 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936110020 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936120987 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.936141014 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936147928 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.936177015 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936191082 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936192036 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.936208963 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.936211109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936224937 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936238050 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936249018 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936255932 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.936261892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936275005 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:24.936288118 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.936320066 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.939449072 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:24.944266081 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047256947 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047282934 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047297001 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047308922 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047317982 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047327995 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047342062 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047343016 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047362089 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047379017 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047385931 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047398090 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047399044 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047446966 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047450066 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047462940 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047481060 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047492981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047499895 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047533989 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047580004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047591925 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047602892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047615051 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047626019 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047631025 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047637939 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047652006 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047658920 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047662973 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047676086 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047681093 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047707081 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047713041 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047724962 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047735929 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047746897 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047755003 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047760010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047791958 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047830105 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047863007 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047873974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047883987 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047895908 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047909021 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047913074 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047923088 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047935963 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047945976 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047960997 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.047972918 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.047992945 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.048015118 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048017025 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.048027039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048039913 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048051119 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048063040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048064947 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.048074007 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048086882 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048094034 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.048106909 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048119068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048132896 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048139095 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.048146009 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048158884 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048166990 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.048171043 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048186064 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048192978 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.048228025 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.048290014 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048302889 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048321009 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048331022 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048337936 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.048345089 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048357010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048367977 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048379898 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048382998 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.048438072 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.048476934 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048487902 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048500061 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048512936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048523903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048535109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048546076 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048557997 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048719883 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048729897 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048747063 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048759937 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048770905 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048782110 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048793077 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048804045 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048815012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048826933 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048836946 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048847914 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048866034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048878908 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048890114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048902988 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.048918009 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049120903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049132109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049143076 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049154043 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049165964 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049176931 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049187899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049199104 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049217939 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049227953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049240112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049251080 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049262047 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049273014 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049284935 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049295902 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049310923 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049323082 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049334049 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049345970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049356937 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049367905 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049381018 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049391031 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049403906 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049416065 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049427032 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049438000 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049513102 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049654961 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049668074 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049678087 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049689054 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049700975 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049710989 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049722910 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049732924 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049745083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049757004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049767971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049779892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049789906 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.049798012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.050689936 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.050719023 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.050750971 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.050777912 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.050813913 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.050841093 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.050903082 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134157896 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134203911 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134223938 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134241104 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134243011 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134263039 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134284973 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134284019 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134311914 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134344101 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134419918 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134438038 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134453058 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134473085 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134500980 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134506941 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134521008 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134527922 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134541988 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134550095 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134557009 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134572029 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134581089 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134589911 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134603977 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134618044 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134618998 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134641886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134655952 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134660959 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134670973 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134687901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134691000 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134704113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134721041 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.134726048 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134756088 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.134777069 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.137146950 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.142187119 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.233551979 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.233570099 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.233586073 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.233599901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.233613014 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.233613014 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.233628988 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.233659029 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.233666897 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.233721972 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.237236023 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.242124081 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.347703934 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.347718000 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.347767115 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.350842953 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.355717897 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.447549105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.447582006 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.447617054 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.447643995 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.450192928 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.455039978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.546819925 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.546890020 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.546907902 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.546915054 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.546962976 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.546986103 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547034979 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.547045946 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547060966 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547076941 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.547091961 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547103882 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547111034 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547122002 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547130108 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547138929 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547147989 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547158957 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.547159910 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547221899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547235966 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547266960 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.547272921 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547297001 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547297955 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.547329903 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.547342062 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547362089 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547369003 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547370911 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.547382116 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547389984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547395945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547405005 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.547436953 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.547483921 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.551129103 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.556042910 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.646790981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.646876097 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.649929047 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.654890060 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.746030092 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.746099949 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.749280930 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.754163027 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847323895 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847347021 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847407103 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.847431898 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.847450018 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847461939 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847476006 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847492933 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847506046 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.847507000 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847522020 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847538948 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847553015 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.847578049 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.847615957 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847620010 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.847631931 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847647905 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847661972 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847671986 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.847687960 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847702980 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847714901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847718000 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.847749949 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847765923 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.847835064 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.847965956 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847982883 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.847995996 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848010063 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848023891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848038912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848052979 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848066092 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848081112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848104000 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848117113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848130941 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848145962 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848160028 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848174095 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848187923 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848294020 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848309040 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848321915 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848337889 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848351002 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848365068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848377943 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848392963 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848407030 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848422050 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848445892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848460913 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848474026 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848488092 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848503113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848517895 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848531961 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848546028 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848561049 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848576069 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848603010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848617077 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848629951 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848644018 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848656893 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848671913 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848685980 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848701000 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848715067 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848735094 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848758936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848773003 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848788023 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848803043 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848815918 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848833084 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848846912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848862886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848877907 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848896027 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848922968 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848937035 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848952055 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848963976 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848978043 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.848993063 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849004984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849020004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849034071 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849047899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849061966 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849069118 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.849075079 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849090099 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849103928 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849114895 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849129915 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849145889 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849159956 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849168062 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.849205971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849220991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.849271059 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.850326061 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.850364923 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.850416899 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.850455999 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.850564957 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.854315042 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.859489918 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.982171059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:25.982240915 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.985579014 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:25.990447044 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.081782103 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.081811905 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.082854033 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.086776972 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.091706991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.264724016 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.264746904 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.264756918 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.264780998 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.264803886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.264817953 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.264830112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.264867067 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.264882088 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.264897108 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.264914036 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.265038013 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.265049934 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.265064955 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.265079975 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.265095949 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.265108109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.265121937 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.265139103 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.265141010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.265165091 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.265254021 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.265268087 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.268946886 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.273794889 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502523899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502551079 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502564907 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502580881 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502597094 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502613068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502621889 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.502626896 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502640963 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502665043 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502671003 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.502681971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502698898 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502703905 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.502752066 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502754927 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.502795935 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.502842903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502887011 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502902985 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502919912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502960920 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.502986908 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.502998114 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503004074 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503020048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503029108 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503034115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503065109 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503079891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503088951 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503093958 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503109932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503134966 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503176928 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503201962 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503217936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503232002 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503257036 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503257990 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503283978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503283978 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503299952 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503329039 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503339052 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503351927 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503357887 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503367901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503381968 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503390074 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503406048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503421068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503434896 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503443003 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503448963 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503463984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503475904 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503489971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503506899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503511906 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503521919 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503536940 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503545046 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503551006 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503566980 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503582954 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503593922 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503597021 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503612995 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503627062 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503645897 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503660917 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503674984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.503679037 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503700018 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.503771067 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.507509947 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.512511969 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.616719007 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.616744041 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.616758108 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.616812944 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.616858006 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.620264053 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.625087023 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.706017971 CET	49682	80	192.168.2.17	192.229.211.108
Jan 20, 2025 18:52:26.719877958 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.719903946 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.719918966 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.719933033 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.719949007 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.719964981 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.719983101 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720007896 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720021009 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720031977 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720035076 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720062971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720077038 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720089912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720091105 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720105886 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720113039 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720122099 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720155954 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720186949 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720187902 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720202923 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720217943 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720232964 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720247984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720248938 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720321894 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720359087 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720385075 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720400095 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720407963 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720412970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720428944 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720443964 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720448017 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720463991 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720477104 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720484018 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720494032 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720519066 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720537901 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720551968 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720556974 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720567942 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720580101 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720594883 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720618010 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720632076 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720645905 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720659971 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720674038 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720690012 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720702887 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720710993 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720729113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720743895 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720748901 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720758915 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720772028 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720777988 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720787048 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720802069 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720815897 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720825911 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720829964 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720848083 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720860004 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.720877886 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.720907927 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.724880934 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.726696014 CET	49757	443	192.168.2.17	52.123.128.254
Jan 20, 2025 18:52:26.726728916 CET	443	49757	52.123.128.254	192.168.2.17
Jan 20, 2025 18:52:26.726804018 CET	49757	443	192.168.2.17	52.123.128.254
Jan 20, 2025 18:52:26.727132082 CET	49757	443	192.168.2.17	52.123.128.254
Jan 20, 2025 18:52:26.727148056 CET	443	49757	52.123.128.254	192.168.2.17
Jan 20, 2025 18:52:26.729760885 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821538925 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821571112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821595907 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821609974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821616888 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.821635008 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821635008 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.821659088 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821675062 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821688890 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821696043 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.821712017 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821724892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821731091 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.821746111 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821759939 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821762085 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.821777105 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821788073 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.821791887 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821805954 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821820974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821829081 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.821841955 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821861029 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821861982 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.821873903 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821882963 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.821887970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821903944 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821919918 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.821919918 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821935892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821949005 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821964979 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.821978092 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.821984053 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.822000980 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.822009087 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.822027922 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.822032928 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.822046995 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.822055101 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.822060108 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.822073936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.822081089 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.822088957 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.822110891 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.822134018 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.822140932 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.822154045 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.822168112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.822180033 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.822256088 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.825747967 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.830636978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.954871893 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.954895973 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.955966949 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.969794989 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.972605944 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:26.975730896 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:26.977484941 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.067002058 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.067018032 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.067034006 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.067071915 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.067081928 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.067099094 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.067109108 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.067112923 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.067147970 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.067254066 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069005013 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069020987 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069044113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069060087 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069072962 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069073915 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069088936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069103003 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069119930 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069128036 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069133997 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069150925 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069159031 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069165945 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069185972 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069189072 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069200993 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069212914 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069215059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069252968 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069256067 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069269896 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069284916 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069298029 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069298983 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069315910 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069341898 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069372892 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069379091 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069387913 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069402933 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069413900 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069417000 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069432974 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069432974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.069453955 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.069502115 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.072482109 CET	49758	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:27.072515965 CET	443	49758	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:27.072657108 CET	49758	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:27.080236912 CET	49757	443	192.168.2.17	52.123.128.254
Jan 20, 2025 18:52:27.090641975 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.090676069 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.090698957 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.095670938 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.095698118 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.095716000 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.183228016 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.183280945 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.183307886 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.188208103 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.188226938 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.188242912 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.199980974 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.200079918 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.334296942 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.340126038 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.466029882 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.466072083 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.466099024 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.471208096 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.479197979 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.479249954 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.479269981 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.481775999 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.484124899 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.486613989 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.491095066 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.543521881 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.576595068 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.576688051 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.608128071 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.608148098 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.608164072 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:27.608215094 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.608273983 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:27.756724119 CET	49758	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:27.756751060 CET	443	49758	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:27.856014967 CET	49680	443	192.168.2.17	20.189.173.13
Jan 20, 2025 18:52:28.208058119 CET	443	49758	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:28.208142996 CET	49758	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:28.261213064 CET	49758	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:28.261230946 CET	443	49758	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:28.261317968 CET	49758	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:28.261365891 CET	443	49758	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:28.261428118 CET	49758	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:30.222954035 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:30.222982883 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:30.223135948 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:30.223155975 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:30.223207951 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:30.223227024 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:30.227824926 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:30.227883101 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:30.227916002 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:30.228012085 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:30.228044033 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:30.228279114 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:30.228315115 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:30.228342056 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:30.228369951 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:30.348699093 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:30.348795891 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:30.435486078 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:52:30.436109066 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:52:30.620753050 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:30.625633001 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:31.191931963 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:31.196969032 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:31.199037075 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:31.203840017 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:31.296595097 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:31.299851894 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:31.304780006 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:31.337040901 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:31.394555092 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:31.443025112 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:35.647855043 CET	49763	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:35.647897959 CET	443	49763	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:35.648319960 CET	49763	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:35.648446083 CET	49763	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:35.648456097 CET	443	49763	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:36.213088989 CET	443	49763	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:36.213180065 CET	49763	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:36.216694117 CET	49763	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:36.216701031 CET	443	49763	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:36.216941118 CET	443	49763	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:36.219301939 CET	49763	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:36.219397068 CET	49763	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:36.219476938 CET	443	49763	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:36.219535112 CET	49763	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:36.317069054 CET	49682	80	192.168.2.17	192.229.211.108
Jan 20, 2025 18:52:37.386257887 CET	49764	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:37.386322021 CET	443	49764	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:37.386465073 CET	49764	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:37.386646986 CET	49764	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:37.386666059 CET	443	49764	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:37.394566059 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:37.395051003 CET	49765	443	192.168.2.17	151.101.193.91
Jan 20, 2025 18:52:37.395088911 CET	443	49765	151.101.193.91	192.168.2.17
Jan 20, 2025 18:52:37.396817923 CET	49765	443	192.168.2.17	151.101.193.91
Jan 20, 2025 18:52:37.396990061 CET	49765	443	192.168.2.17	151.101.193.91
Jan 20, 2025 18:52:37.397012949 CET	443	49765	151.101.193.91	192.168.2.17
Jan 20, 2025 18:52:37.399368048 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:37.491285086 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:37.535200119 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:37.850603104 CET	443	49764	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:37.850730896 CET	49764	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:37.855468988 CET	443	49765	151.101.193.91	192.168.2.17
Jan 20, 2025 18:52:37.862411976 CET	49764	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:37.862437010 CET	49765	443	192.168.2.17	151.101.193.91
Jan 20, 2025 18:52:37.862452984 CET	443	49764	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:37.862690926 CET	443	49764	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:37.873102903 CET	49765	443	192.168.2.17	151.101.193.91
Jan 20, 2025 18:52:37.873126030 CET	443	49765	151.101.193.91	192.168.2.17
Jan 20, 2025 18:52:37.873426914 CET	443	49765	151.101.193.91	192.168.2.17
Jan 20, 2025 18:52:37.881635904 CET	49764	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:37.881778955 CET	49764	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:37.881875038 CET	443	49764	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:37.882241011 CET	49766	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:37.882280111 CET	443	49766	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:37.882561922 CET	49764	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:37.882584095 CET	49765	443	192.168.2.17	151.101.193.91
Jan 20, 2025 18:52:37.882710934 CET	49766	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:37.882740021 CET	49765	443	192.168.2.17	151.101.193.91
Jan 20, 2025 18:52:37.882826090 CET	443	49765	151.101.193.91	192.168.2.17
Jan 20, 2025 18:52:37.882893085 CET	49766	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:37.882906914 CET	443	49766	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:37.883066893 CET	49765	443	192.168.2.17	151.101.193.91
Jan 20, 2025 18:52:38.341586113 CET	443	49766	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:38.341677904 CET	49766	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:38.345582008 CET	49766	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:38.345593929 CET	443	49766	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:38.345801115 CET	443	49766	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:38.348541021 CET	49766	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:38.348628998 CET	49766	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:38.348696947 CET	443	49766	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:38.348761082 CET	49766	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:39.528487921 CET	49768	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:39.528542995 CET	443	49768	35.190.72.216	192.168.2.17
Jan 20, 2025 18:52:39.528985977 CET	49768	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:39.530373096 CET	49768	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:39.530389071 CET	443	49768	35.190.72.216	192.168.2.17
Jan 20, 2025 18:52:39.537765980 CET	49769	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:39.537808895 CET	443	49769	35.201.103.21	192.168.2.17
Jan 20, 2025 18:52:39.537883997 CET	49769	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:39.539453983 CET	49769	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:39.539470911 CET	443	49769	35.201.103.21	192.168.2.17
Jan 20, 2025 18:52:39.699707985 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:39.702330112 CET	49770	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:39.702375889 CET	443	49770	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:39.702536106 CET	49771	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:39.702579021 CET	443	49771	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:39.702816010 CET	49772	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:39.702850103 CET	443	49772	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:39.703824043 CET	49770	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:39.703829050 CET	49771	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:39.703846931 CET	49772	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:39.704070091 CET	49770	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:39.704086065 CET	443	49770	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:39.704257965 CET	49771	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:39.704272032 CET	443	49771	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:39.704338074 CET	49772	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:39.704349041 CET	443	49772	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:39.704600096 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:39.794662952 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:39.840121984 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:39.863301992 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:39.868264914 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:39.981043100 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:39.986970901 CET	443	49768	35.190.72.216	192.168.2.17
Jan 20, 2025 18:52:39.987149000 CET	49768	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:39.992712021 CET	49768	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:39.992722988 CET	443	49768	35.190.72.216	192.168.2.17
Jan 20, 2025 18:52:39.992790937 CET	49768	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:39.992945910 CET	443	49768	35.190.72.216	192.168.2.17
Jan 20, 2025 18:52:39.993009090 CET	49768	443	192.168.2.17	35.190.72.216
Jan 20, 2025 18:52:39.994596004 CET	443	49769	35.201.103.21	192.168.2.17
Jan 20, 2025 18:52:39.994666100 CET	49769	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:39.999331951 CET	49769	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:39.999361992 CET	443	49769	35.201.103.21	192.168.2.17
Jan 20, 2025 18:52:39.999481916 CET	49769	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:39.999542952 CET	443	49769	35.201.103.21	192.168.2.17
Jan 20, 2025 18:52:39.999593019 CET	49769	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:39.999938011 CET	49773	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:39.999975920 CET	443	49773	35.201.103.21	192.168.2.17
Jan 20, 2025 18:52:40.000060081 CET	49773	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:40.001461029 CET	49773	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:40.001473904 CET	443	49773	35.201.103.21	192.168.2.17
Jan 20, 2025 18:52:40.026097059 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:40.163265944 CET	443	49772	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.163384914 CET	49772	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.166832924 CET	49772	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.166855097 CET	443	49772	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.167143106 CET	443	49772	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.167738914 CET	443	49770	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.169665098 CET	49772	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.169755936 CET	49772	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.169862986 CET	443	49772	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.175333023 CET	443	49772	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.179199934 CET	49772	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.179231882 CET	49772	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.179330111 CET	443	49770	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.179347038 CET	49770	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.179624081 CET	49772	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.179663897 CET	49770	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.182424068 CET	49770	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.182429075 CET	443	49770	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.182713985 CET	443	49770	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.185472965 CET	49770	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.185547113 CET	49770	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.185638905 CET	443	49770	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.185698032 CET	49770	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.189363003 CET	443	49771	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.189454079 CET	49771	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.192297935 CET	49771	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.192307949 CET	443	49771	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.192719936 CET	443	49771	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.195738077 CET	49771	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.195811987 CET	49771	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.195951939 CET	443	49771	35.244.181.201	192.168.2.17
Jan 20, 2025 18:52:40.196012974 CET	49771	443	192.168.2.17	35.244.181.201
Jan 20, 2025 18:52:40.485434055 CET	443	49773	35.201.103.21	192.168.2.17
Jan 20, 2025 18:52:40.489831924 CET	49773	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:40.496643066 CET	49773	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:40.496666908 CET	443	49773	35.201.103.21	192.168.2.17
Jan 20, 2025 18:52:40.496752024 CET	49773	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:40.496870995 CET	443	49773	35.201.103.21	192.168.2.17
Jan 20, 2025 18:52:40.496944904 CET	49773	443	192.168.2.17	35.201.103.21
Jan 20, 2025 18:52:42.648386002 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:42.653328896 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:42.657747030 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:42.662554979 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:42.758951902 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:42.763267994 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:42.804146051 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:42.819363117 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:44.472063065 CET	49775	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:44.472100973 CET	443	49775	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:44.472451925 CET	49775	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:44.474185944 CET	49775	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:44.474204063 CET	443	49775	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:44.699490070 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:44.705194950 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:44.795272112 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:44.850116014 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:44.938960075 CET	443	49775	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:44.939043045 CET	49775	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:44.944931030 CET	49775	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:44.944948912 CET	443	49775	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:44.945019960 CET	49775	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:44.945080042 CET	443	49775	34.107.243.93	192.168.2.17
Jan 20, 2025 18:52:44.945142031 CET	49775	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:52:45.481831074 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:45.486896992 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:45.578125954 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:45.633102894 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:46.067661047 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:46.072546959 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:46.233772993 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:46.289127111 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:46.350532055 CET	49776	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:46.350583076 CET	443	49776	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:46.350660086 CET	49776	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:46.350805044 CET	49776	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:46.350821972 CET	443	49776	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:46.814959049 CET	443	49776	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:46.815042973 CET	49776	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.151896954 CET	49776	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.151918888 CET	443	49776	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:48.152213097 CET	443	49776	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:48.155046940 CET	49776	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.155193090 CET	49776	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.155226946 CET	443	49776	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:48.155277967 CET	49776	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.155643940 CET	49777	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.155663967 CET	443	49777	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:48.155734062 CET	49777	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.155865908 CET	49777	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.155878067 CET	443	49777	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:48.628695965 CET	443	49777	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:48.628834009 CET	49777	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.632479906 CET	49777	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.632488012 CET	443	49777	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:48.632689953 CET	443	49777	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:48.635231972 CET	49777	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.635344982 CET	49777	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.635354996 CET	443	49777	34.149.100.209	192.168.2.17
Jan 20, 2025 18:52:48.635407925 CET	49777	443	192.168.2.17	34.149.100.209
Jan 20, 2025 18:52:48.774072886 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:48.778999090 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:48.888818026 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:48.939126968 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:49.410227060 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:49.415193081 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:49.505127907 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:49.553169966 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:58.900227070 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:58.905612946 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:52:59.517261982 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:52:59.522450924 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:06.608711958 CET	49780	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.608731985 CET	443	49780	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.608899117 CET	49781	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.608939886 CET	443	49781	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.609332085 CET	49780	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.609432936 CET	49781	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.609661102 CET	49781	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.609675884 CET	443	49781	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.609813929 CET	49780	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.609827042 CET	443	49780	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.610080004 CET	49782	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.610089064 CET	443	49782	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.610265970 CET	49783	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.610275030 CET	443	49783	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.610413074 CET	49784	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.610451937 CET	443	49784	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.611040115 CET	49785	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.611067057 CET	443	49785	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.611162901 CET	49782	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.611180067 CET	49783	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.611180067 CET	49785	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.611181021 CET	49784	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.611407995 CET	49784	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.611408949 CET	49782	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.611418962 CET	443	49782	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.611424923 CET	443	49784	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.611483097 CET	49783	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.611495018 CET	443	49783	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.611548901 CET	49785	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:06.611560106 CET	443	49785	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:06.616102934 CET	49786	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:06.616113901 CET	443	49786	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:06.616558075 CET	49786	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:06.618071079 CET	49786	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:06.618081093 CET	443	49786	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:07.072122097 CET	443	49781	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.072246075 CET	49781	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.073462963 CET	443	49783	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.073549986 CET	49783	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.075915098 CET	49781	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.075926065 CET	443	49781	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.076214075 CET	443	49781	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.076822042 CET	443	49784	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.076890945 CET	49784	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.078246117 CET	443	49786	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:07.078315020 CET	49786	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:07.078797102 CET	49783	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.078803062 CET	443	49783	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.079055071 CET	443	49783	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.081628084 CET	49784	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.081639051 CET	443	49784	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.081892014 CET	443	49784	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.082547903 CET	443	49782	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.083357096 CET	443	49785	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.083595037 CET	49785	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.083595037 CET	49782	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.086491108 CET	49782	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.086500883 CET	443	49782	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.086900949 CET	443	49782	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.088745117 CET	49785	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.088752031 CET	443	49785	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.089154959 CET	443	49785	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.093137980 CET	443	49780	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.093286991 CET	49780	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.095828056 CET	49780	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.095832109 CET	443	49780	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.096143007 CET	443	49780	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.096604109 CET	49781	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.096795082 CET	443	49781	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.096848965 CET	49781	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.096930981 CET	49781	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.096946001 CET	443	49781	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.097719908 CET	49783	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.097906113 CET	443	49783	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.097954988 CET	49783	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.098228931 CET	49783	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.098232985 CET	443	49783	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.100136042 CET	49784	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.100300074 CET	443	49784	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.100434065 CET	49784	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.100442886 CET	443	49784	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.100467920 CET	49784	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.101057053 CET	49787	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.101083994 CET	443	49787	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.101114035 CET	49786	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:07.101125002 CET	443	49786	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:07.101134062 CET	49782	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.101264000 CET	49782	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.101283073 CET	443	49786	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:07.101316929 CET	49786	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:07.101321936 CET	443	49786	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:07.101574898 CET	443	49782	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.101975918 CET	49788	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.102066040 CET	443	49788	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.102464914 CET	49782	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.102483034 CET	49787	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.102499962 CET	49788	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.103212118 CET	49787	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.103224039 CET	443	49787	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.103400946 CET	49788	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.103441954 CET	443	49788	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.104099035 CET	49785	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.104175091 CET	49785	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.104273081 CET	49780	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.104335070 CET	49780	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.104568005 CET	443	49785	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.104576111 CET	443	49780	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.104628086 CET	49780	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.104644060 CET	49785	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.311336994 CET	443	49786	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:07.311395884 CET	49786	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:07.567292929 CET	443	49787	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.567368984 CET	49787	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.583542109 CET	443	49788	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.583709002 CET	49788	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.701574087 CET	49788	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.701608896 CET	443	49788	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.702467918 CET	443	49788	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.704190969 CET	49787	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.704212904 CET	443	49787	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.704485893 CET	443	49787	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.708513021 CET	49788	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.708609104 CET	49788	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.708744049 CET	49787	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.708801985 CET	49787	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.708924055 CET	443	49787	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.708939075 CET	443	49788	34.120.208.123	192.168.2.17
Jan 20, 2025 18:53:07.708981037 CET	49787	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.709019899 CET	49788	443	192.168.2.17	34.120.208.123
Jan 20, 2025 18:53:07.971796989 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:53:07.971960068 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:53:07.971993923 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:53:07.976963043 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:53:07.977117062 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:53:07.977129936 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:53:07.977233887 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:53:07.977247000 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:53:07.977260113 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:53:07.977272987 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:53:07.977286100 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:53:08.024792910 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:08.029687881 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:08.093735933 CET	443	49691	204.79.197.200	192.168.2.17
Jan 20, 2025 18:53:08.094671011 CET	49691	443	192.168.2.17	204.79.197.200
Jan 20, 2025 18:53:08.121340036 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:08.177254915 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:09.179250002 CET	49791	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:53:09.179296017 CET	443	49791	142.250.186.36	192.168.2.17
Jan 20, 2025 18:53:09.179481983 CET	49791	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:53:09.179780006 CET	49791	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:53:09.179790020 CET	443	49791	142.250.186.36	192.168.2.17
Jan 20, 2025 18:53:09.525305986 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:09.530142069 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:09.819581032 CET	443	49791	142.250.186.36	192.168.2.17
Jan 20, 2025 18:53:09.819941998 CET	49791	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:53:09.819972992 CET	443	49791	142.250.186.36	192.168.2.17
Jan 20, 2025 18:53:09.821077108 CET	443	49791	142.250.186.36	192.168.2.17
Jan 20, 2025 18:53:09.822014093 CET	49791	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:53:09.822192907 CET	443	49791	142.250.186.36	192.168.2.17
Jan 20, 2025 18:53:09.866298914 CET	49791	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:53:11.048510075 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:11.054312944 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:11.145755053 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:11.200304031 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:18.128334999 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:18.133616924 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:19.718206882 CET	443	49791	142.250.186.36	192.168.2.17
Jan 20, 2025 18:53:19.718280077 CET	443	49791	142.250.186.36	192.168.2.17
Jan 20, 2025 18:53:19.718511105 CET	49791	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:53:21.114032030 CET	49791	443	192.168.2.17	142.250.186.36
Jan 20, 2025 18:53:21.114125967 CET	443	49791	142.250.186.36	192.168.2.17
Jan 20, 2025 18:53:21.160372972 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:21.165498972 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:28.135479927 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:28.140542030 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:31.174608946 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:31.179460049 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:38.151521921 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:38.157541990 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:41.182495117 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:41.187522888 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:48.038414001 CET	49793	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:48.038501024 CET	443	49793	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:48.038611889 CET	49793	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:48.040826082 CET	49793	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:48.040863991 CET	443	49793	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:48.166537046 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:48.171683073 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:48.552153111 CET	443	49793	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:48.552382946 CET	49793	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:48.561273098 CET	49793	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:48.561319113 CET	443	49793	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:48.561403036 CET	49793	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:48.561608076 CET	443	49793	34.107.243.93	192.168.2.17
Jan 20, 2025 18:53:48.561686993 CET	49793	443	192.168.2.17	34.107.243.93
Jan 20, 2025 18:53:48.565248966 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:48.570161104 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:48.661699057 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:48.666620016 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:48.671502113 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:48.702564001 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:48.762857914 CET	80	49743	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:48.812607050 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:58.682696104 CET	49740	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:58.687537909 CET	80	49740	34.107.221.82	192.168.2.17
Jan 20, 2025 18:53:58.769604921 CET	49743	80	192.168.2.17	34.107.221.82
Jan 20, 2025 18:53:58.774542093 CET	80	49743	34.107.221.82	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 20, 2025 18:52:04.319171906 CET	53	54460	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:04.403373003 CET	53	54895	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:04.404797077 CET	54534	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:04.404952049 CET	63236	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:04.411915064 CET	53	54534	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:04.411973953 CET	53	63236	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:05.409658909 CET	53	55792	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:06.024797916 CET	53	63141	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:06.377892017 CET	52520	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:06.385144949 CET	53	52520	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:06.385809898 CET	56086	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:06.392518997 CET	53	56086	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:07.435631990 CET	54025	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:07.435810089 CET	52366	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:07.440057039 CET	53	62384	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:07.442122936 CET	53	54025	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:07.443120003 CET	53	52366	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.174964905 CET	57592	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.183482885 CET	63569	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.190198898 CET	53	63569	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.190731049 CET	56168	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.198755026 CET	53	56168	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.432079077 CET	63131	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.432246923 CET	54076	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.439363956 CET	53	63131	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.442622900 CET	53	54076	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.706895113 CET	62409	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.714174986 CET	53	62409	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.716012955 CET	60819	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.722685099 CET	53	60819	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.724240065 CET	58088	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.731467962 CET	53	58088	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.751272917 CET	50591	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.754225016 CET	52362	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.757952929 CET	53	50591	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.758809090 CET	54551	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.760906935 CET	56523	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.761013031 CET	53	52362	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.761778116 CET	61086	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.766041040 CET	53	54551	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.767055988 CET	56374	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.768506050 CET	53	61086	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.768719912 CET	53	56523	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.770196915 CET	50532	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.770504951 CET	63856	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.774012089 CET	53	56374	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.776999950 CET	53	50532	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.777015924 CET	53	63856	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.786600113 CET	52597	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.786900043 CET	54354	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.787260056 CET	59567	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.793489933 CET	53	52597	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.794094086 CET	53	59567	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.794476032 CET	52423	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.794575930 CET	53	54354	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.794955969 CET	61797	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.795645952 CET	53751	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.801816940 CET	53	61797	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.802270889 CET	53	53751	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.802390099 CET	60384	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.802550077 CET	53	52423	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.802892923 CET	51096	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.803436041 CET	61192	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.808974981 CET	53	60384	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.810168028 CET	53	61192	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.810666084 CET	59568	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.810902119 CET	53	51096	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.814434052 CET	56451	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.821043015 CET	53	56451	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.829679966 CET	53	59568	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.830492973 CET	49531	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.837163925 CET	53	49531	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.926465988 CET	60103	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.926856041 CET	59384	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.933367968 CET	53	60103	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.933490038 CET	53	59384	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.946410894 CET	55786	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.947207928 CET	57298	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.953421116 CET	53	55786	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.954230070 CET	53	57298	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:08.954901934 CET	61065	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:08.961503029 CET	53	61065	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:09.105952024 CET	65119	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:10.575089931 CET	56582	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:10.582356930 CET	53	56582	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:10.584145069 CET	60175	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:10.591588020 CET	53	60175	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:10.592210054 CET	57486	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:10.599993944 CET	53	57486	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:12.451848984 CET	52547	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:12.577279091 CET	57857	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:12.655333042 CET	53	57857	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:12.656683922 CET	59525	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:12.656856060 CET	50665	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:12.663722038 CET	53	59525	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:12.664238930 CET	56290	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:12.665077925 CET	53	50665	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:12.665813923 CET	49470	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:12.671262026 CET	53	56290	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:12.674798012 CET	53	49470	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:12.674808979 CET	53	58276	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:16.354100943 CET	49867	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:16.362451077 CET	53	49867	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:17.576906919 CET	61311	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:17.589009047 CET	53	61311	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:19.603823900 CET	51404	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:19.613287926 CET	53	51404	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:20.797491074 CET	54884	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:20.804080963 CET	53	54884	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:22.290409088 CET	53	52806	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:27.058413029 CET	54969	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:27.065826893 CET	53	54969	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:27.066888094 CET	65333	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:27.071901083 CET	58949	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:27.073582888 CET	53	65333	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:27.078888893 CET	53	58949	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:35.648231983 CET	65124	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:35.656292915 CET	53	65124	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:37.385679960 CET	52867	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:37.393055916 CET	53	52867	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:37.395337105 CET	56536	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:37.395962000 CET	55481	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:37.403358936 CET	53	55481	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:37.404105902 CET	53836	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:37.411772966 CET	53	53836	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:39.528887987 CET	51822	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:39.535945892 CET	53	51822	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:39.538153887 CET	58554	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:39.545545101 CET	53	58554	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:39.546180010 CET	57004	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:39.552890062 CET	53	57004	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:41.393241882 CET	53	62399	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:44.471525908 CET	55781	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:44.479020119 CET	53	55781	1.1.1.1	192.168.2.17
Jan 20, 2025 18:52:44.480290890 CET	58641	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:52:44.486901045 CET	53	58641	1.1.1.1	192.168.2.17
Jan 20, 2025 18:53:03.794823885 CET	53	61067	1.1.1.1	192.168.2.17
Jan 20, 2025 18:53:04.299556017 CET	53	51728	1.1.1.1	192.168.2.17
Jan 20, 2025 18:53:06.111923933 CET	138	138	192.168.2.17	192.168.2.255
Jan 20, 2025 18:53:06.615448952 CET	59758	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:53:06.616826057 CET	62363	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:53:06.621979952 CET	53	59758	1.1.1.1	192.168.2.17
Jan 20, 2025 18:53:06.623282909 CET	53	62363	1.1.1.1	192.168.2.17
Jan 20, 2025 18:53:06.633758068 CET	59518	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:53:06.640515089 CET	53	59518	1.1.1.1	192.168.2.17
Jan 20, 2025 18:53:08.024996996 CET	51022	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:53:23.378349066 CET	53	64863	1.1.1.1	192.168.2.17
Jan 20, 2025 18:53:48.029207945 CET	57171	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:53:48.036851883 CET	53	57171	1.1.1.1	192.168.2.17
Jan 20, 2025 18:53:48.037969112 CET	57621	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:53:48.044940948 CET	53	57621	1.1.1.1	192.168.2.17
Jan 20, 2025 18:53:48.565258026 CET	55830	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:53:48.663499117 CET	51765	53	192.168.2.17	1.1.1.1
Jan 20, 2025 18:53:48.670178890 CET	53	51765	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 20, 2025 18:52:04.404797077 CET	192.168.2.17	1.1.1.1	0x80aa	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:04.404952049 CET	192.168.2.17	1.1.1.1	0xfec6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 20, 2025 18:52:06.377892017 CET	192.168.2.17	1.1.1.1	0xb831	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:06.385809898 CET	192.168.2.17	1.1.1.1	0x277c	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Jan 20, 2025 18:52:07.435631990 CET	192.168.2.17	1.1.1.1	0x9232	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:07.435810089 CET	192.168.2.17	1.1.1.1	0xee9e	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Jan 20, 2025 18:52:08.174964905 CET	192.168.2.17	1.1.1.1	0x3df8	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.183482885 CET	192.168.2.17	1.1.1.1	0x9169	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.190731049 CET	192.168.2.17	1.1.1.1	0x231d	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Jan 20, 2025 18:52:08.432079077 CET	192.168.2.17	1.1.1.1	0x3d5f	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.432246923 CET	192.168.2.17	1.1.1.1	0xed03	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 20, 2025 18:52:08.706895113 CET	192.168.2.17	1.1.1.1	0x712c	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.716012955 CET	192.168.2.17	1.1.1.1	0xcc0d	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.724240065 CET	192.168.2.17	1.1.1.1	0x3eb6	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Jan 20, 2025 18:52:08.751272917 CET	192.168.2.17	1.1.1.1	0xc037	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.754225016 CET	192.168.2.17	1.1.1.1	0xad8	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.758809090 CET	192.168.2.17	1.1.1.1	0x87a5	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.760906935 CET	192.168.2.17	1.1.1.1	0x4e56	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761778116 CET	192.168.2.17	1.1.1.1	0xd25f	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.767055988 CET	192.168.2.17	1.1.1.1	0x2aba	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.770196915 CET	192.168.2.17	1.1.1.1	0x47e5	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Jan 20, 2025 18:52:08.770504951 CET	192.168.2.17	1.1.1.1	0x38b	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.786600113 CET	192.168.2.17	1.1.1.1	0x58b1	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Jan 20, 2025 18:52:08.786900043 CET	192.168.2.17	1.1.1.1	0x2c80	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Jan 20, 2025 18:52:08.787260056 CET	192.168.2.17	1.1.1.1	0x667c	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.794476032 CET	192.168.2.17	1.1.1.1	0x828b	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.794955969 CET	192.168.2.17	1.1.1.1	0xdde5	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.795645952 CET	192.168.2.17	1.1.1.1	0xebcc	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.802390099 CET	192.168.2.17	1.1.1.1	0xb39	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Jan 20, 2025 18:52:08.802892923 CET	192.168.2.17	1.1.1.1	0x2f14	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Jan 20, 2025 18:52:08.803436041 CET	192.168.2.17	1.1.1.1	0x1a7a	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.810666084 CET	192.168.2.17	1.1.1.1	0xe1b9	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.814434052 CET	192.168.2.17	1.1.1.1	0x3a68	Standard query (0)	twitter.com	28	IN (0x0001)	false
Jan 20, 2025 18:52:08.830492973 CET	192.168.2.17	1.1.1.1	0x3a30	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Jan 20, 2025 18:52:08.926465988 CET	192.168.2.17	1.1.1.1	0x2bf5	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.926856041 CET	192.168.2.17	1.1.1.1	0xd858	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.946410894 CET	192.168.2.17	1.1.1.1	0x3fcc	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.947207928 CET	192.168.2.17	1.1.1.1	0x2c1	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.954901934 CET	192.168.2.17	1.1.1.1	0x32	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Jan 20, 2025 18:52:09.105952024 CET	192.168.2.17	1.1.1.1	0x36	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:10.575089931 CET	192.168.2.17	1.1.1.1	0x3a58	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:10.584145069 CET	192.168.2.17	1.1.1.1	0xb78c	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:10.592210054 CET	192.168.2.17	1.1.1.1	0x269	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Jan 20, 2025 18:52:12.451848984 CET	192.168.2.17	1.1.1.1	0xae77	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:12.577279091 CET	192.168.2.17	1.1.1.1	0x4dfc	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:12.656683922 CET	192.168.2.17	1.1.1.1	0xa525	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:12.656856060 CET	192.168.2.17	1.1.1.1	0xf216	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:12.664238930 CET	192.168.2.17	1.1.1.1	0x59a	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Jan 20, 2025 18:52:12.665813923 CET	192.168.2.17	1.1.1.1	0x3b71	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Jan 20, 2025 18:52:16.354100943 CET	192.168.2.17	1.1.1.1	0x27d8	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Jan 20, 2025 18:52:17.576906919 CET	192.168.2.17	1.1.1.1	0x68a7	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Jan 20, 2025 18:52:19.603823900 CET	192.168.2.17	1.1.1.1	0x4d7a	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:20.797491074 CET	192.168.2.17	1.1.1.1	0xa18	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:27.058413029 CET	192.168.2.17	1.1.1.1	0x1983	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:27.066888094 CET	192.168.2.17	1.1.1.1	0x81fc	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:27.071901083 CET	192.168.2.17	1.1.1.1	0xa275	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Jan 20, 2025 18:52:35.648231983 CET	192.168.2.17	1.1.1.1	0xff49	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Jan 20, 2025 18:52:37.385679960 CET	192.168.2.17	1.1.1.1	0xd028	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.395337105 CET	192.168.2.17	1.1.1.1	0x4838	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.395962000 CET	192.168.2.17	1.1.1.1	0xdca6	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.404105902 CET	192.168.2.17	1.1.1.1	0x64ec	Standard query (0)	services.addons.mozilla.org	28	IN (0x0001)	false
Jan 20, 2025 18:52:39.528887987 CET	192.168.2.17	1.1.1.1	0x11ec	Standard query (0)	normandy.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:39.538153887 CET	192.168.2.17	1.1.1.1	0xeee8	Standard query (0)	normandy-cdn.services.mozilla.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:39.546180010 CET	192.168.2.17	1.1.1.1	0x5728	Standard query (0)	normandy-cdn.services.mozilla.com	28	IN (0x0001)	false
Jan 20, 2025 18:52:44.471525908 CET	192.168.2.17	1.1.1.1	0x5bf7	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:44.480290890 CET	192.168.2.17	1.1.1.1	0xadde	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Jan 20, 2025 18:53:06.615448952 CET	192.168.2.17	1.1.1.1	0x685a	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:06.616826057 CET	192.168.2.17	1.1.1.1	0xdfc4	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Jan 20, 2025 18:53:06.633758068 CET	192.168.2.17	1.1.1.1	0x1823	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Jan 20, 2025 18:53:08.024996996 CET	192.168.2.17	1.1.1.1	0x8e90	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:48.029207945 CET	192.168.2.17	1.1.1.1	0x7c19	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:48.037969112 CET	192.168.2.17	1.1.1.1	0x151d	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Jan 20, 2025 18:53:48.565258026 CET	192.168.2.17	1.1.1.1	0x6fd1	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:48.663499117 CET	192.168.2.17	1.1.1.1	0x64df	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 20, 2025 18:52:04.411915064 CET	1.1.1.1	192.168.2.17	0x80aa	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:04.411973953 CET	1.1.1.1	192.168.2.17	0xfec6	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 20, 2025 18:52:06.372893095 CET	1.1.1.1	192.168.2.17	0xdb0	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:06.385144949 CET	1.1.1.1	192.168.2.17	0xb831	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:07.442122936 CET	1.1.1.1	192.168.2.17	0x9232	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:07.442122936 CET	1.1.1.1	192.168.2.17	0x9232	No error (0)	plus.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:07.443120003 CET	1.1.1.1	192.168.2.17	0xee9e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:08.182065010 CET	1.1.1.1	192.168.2.17	0x3df8	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:08.182065010 CET	1.1.1.1	192.168.2.17	0x3df8	No error (0)	detectportal.prod.mozaws.net	prod.detectportal.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:08.182065010 CET	1.1.1.1	192.168.2.17	0x3df8	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.190198898 CET	1.1.1.1	192.168.2.17	0x9169	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.198755026 CET	1.1.1.1	192.168.2.17	0x231d	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Jan 20, 2025 18:52:08.439363956 CET	1.1.1.1	192.168.2.17	0x3d5f	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.714174986 CET	1.1.1.1	192.168.2.17	0x712c	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.722685099 CET	1.1.1.1	192.168.2.17	0xcc0d	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.757952929 CET	1.1.1.1	192.168.2.17	0xc037	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:08.757952929 CET	1.1.1.1	192.168.2.17	0xc037	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.760112047 CET	1.1.1.1	192.168.2.17	0xf63b	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:08.760112047 CET	1.1.1.1	192.168.2.17	0xf63b	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.761013031 CET	1.1.1.1	192.168.2.17	0xad8	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.766041040 CET	1.1.1.1	192.168.2.17	0x87a5	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:08.766041040 CET	1.1.1.1	192.168.2.17	0x87a5	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768506050 CET	1.1.1.1	192.168.2.17	0xd25f	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768719912 CET	1.1.1.1	192.168.2.17	0x4e56	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:08.768719912 CET	1.1.1.1	192.168.2.17	0x4e56	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.774012089 CET	1.1.1.1	192.168.2.17	0x2aba	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.776999950 CET	1.1.1.1	192.168.2.17	0x47e5	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Jan 20, 2025 18:52:08.776999950 CET	1.1.1.1	192.168.2.17	0x47e5	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Jan 20, 2025 18:52:08.776999950 CET	1.1.1.1	192.168.2.17	0x47e5	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Jan 20, 2025 18:52:08.776999950 CET	1.1.1.1	192.168.2.17	0x47e5	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Jan 20, 2025 18:52:08.777015924 CET	1.1.1.1	192.168.2.17	0x38b	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.793489933 CET	1.1.1.1	192.168.2.17	0x58b1	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Jan 20, 2025 18:52:08.794094086 CET	1.1.1.1	192.168.2.17	0x667c	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:08.794094086 CET	1.1.1.1	192.168.2.17	0x667c	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.794094086 CET	1.1.1.1	192.168.2.17	0x667c	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.794094086 CET	1.1.1.1	192.168.2.17	0x667c	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.794094086 CET	1.1.1.1	192.168.2.17	0x667c	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.794575930 CET	1.1.1.1	192.168.2.17	0x2c80	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Jan 20, 2025 18:52:08.801816940 CET	1.1.1.1	192.168.2.17	0xdde5	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.801816940 CET	1.1.1.1	192.168.2.17	0xdde5	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.801816940 CET	1.1.1.1	192.168.2.17	0xdde5	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.801816940 CET	1.1.1.1	192.168.2.17	0xdde5	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.802270889 CET	1.1.1.1	192.168.2.17	0xebcc	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.802550077 CET	1.1.1.1	192.168.2.17	0x828b	No error (0)	twitter.com		104.244.42.129	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.802550077 CET	1.1.1.1	192.168.2.17	0x828b	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.802550077 CET	1.1.1.1	192.168.2.17	0x828b	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.802550077 CET	1.1.1.1	192.168.2.17	0x828b	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.810168028 CET	1.1.1.1	192.168.2.17	0x1a7a	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.810168028 CET	1.1.1.1	192.168.2.17	0x1a7a	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.810168028 CET	1.1.1.1	192.168.2.17	0x1a7a	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.810168028 CET	1.1.1.1	192.168.2.17	0x1a7a	No error (0)	twitter.com		104.244.42.129	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.829679966 CET	1.1.1.1	192.168.2.17	0xe1b9	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.933367968 CET	1.1.1.1	192.168.2.17	0x2bf5	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:08.933367968 CET	1.1.1.1	192.168.2.17	0x2bf5	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:08.933367968 CET	1.1.1.1	192.168.2.17	0x2bf5	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.933490038 CET	1.1.1.1	192.168.2.17	0xd858	No error (0)	example.org		96.7.128.192	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.933490038 CET	1.1.1.1	192.168.2.17	0xd858	No error (0)	example.org		23.215.0.132	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.933490038 CET	1.1.1.1	192.168.2.17	0xd858	No error (0)	example.org		96.7.128.186	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.933490038 CET	1.1.1.1	192.168.2.17	0xd858	No error (0)	example.org		23.215.0.133	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.953421116 CET	1.1.1.1	192.168.2.17	0x3fcc	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.953421116 CET	1.1.1.1	192.168.2.17	0x3fcc	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.954230070 CET	1.1.1.1	192.168.2.17	0x2c1	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:08.961503029 CET	1.1.1.1	192.168.2.17	0x32	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Jan 20, 2025 18:52:09.113667965 CET	1.1.1.1	192.168.2.17	0x36	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:09.113667965 CET	1.1.1.1	192.168.2.17	0x36	No error (0)	detectportal.prod.mozaws.net	prod.detectportal.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:09.113667965 CET	1.1.1.1	192.168.2.17	0x36	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:10.582356930 CET	1.1.1.1	192.168.2.17	0x3a58	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:10.582356930 CET	1.1.1.1	192.168.2.17	0x3a58	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:10.591588020 CET	1.1.1.1	192.168.2.17	0xb78c	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:12.655333042 CET	1.1.1.1	192.168.2.17	0x4dfc	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:12.655786037 CET	1.1.1.1	192.168.2.17	0x508d	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:12.657048941 CET	1.1.1.1	192.168.2.17	0xae77	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:12.657048941 CET	1.1.1.1	192.168.2.17	0xae77	No error (0)	shavar.prod.mozaws.net		44.233.129.8	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:12.657048941 CET	1.1.1.1	192.168.2.17	0xae77	No error (0)	shavar.prod.mozaws.net		34.211.101.148	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:12.657048941 CET	1.1.1.1	192.168.2.17	0xae77	No error (0)	shavar.prod.mozaws.net		34.211.125.135	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:12.663722038 CET	1.1.1.1	192.168.2.17	0xa525	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:12.665077925 CET	1.1.1.1	192.168.2.17	0xf216	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:16.362144947 CET	1.1.1.1	192.168.2.17	0x649a	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:16.362144947 CET	1.1.1.1	192.168.2.17	0x649a	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:17.583075047 CET	1.1.1.1	192.168.2.17	0xb64f	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:19.613287926 CET	1.1.1.1	192.168.2.17	0x4d7a	No error (0)	example.org		23.215.0.132	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:19.613287926 CET	1.1.1.1	192.168.2.17	0x4d7a	No error (0)	example.org		23.215.0.133	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:19.613287926 CET	1.1.1.1	192.168.2.17	0x4d7a	No error (0)	example.org		96.7.128.192	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:19.613287926 CET	1.1.1.1	192.168.2.17	0x4d7a	No error (0)	example.org		96.7.128.186	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:20.804080963 CET	1.1.1.1	192.168.2.17	0xa18	No error (0)	example.org		96.7.128.192	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:20.804080963 CET	1.1.1.1	192.168.2.17	0xa18	No error (0)	example.org		23.215.0.132	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:20.804080963 CET	1.1.1.1	192.168.2.17	0xa18	No error (0)	example.org		96.7.128.186	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:20.804080963 CET	1.1.1.1	192.168.2.17	0xa18	No error (0)	example.org		23.215.0.133	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:27.065826893 CET	1.1.1.1	192.168.2.17	0x1983	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:27.065826893 CET	1.1.1.1	192.168.2.17	0x1983	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:27.073582888 CET	1.1.1.1	192.168.2.17	0x81fc	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.393055916 CET	1.1.1.1	192.168.2.17	0xd028	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.393055916 CET	1.1.1.1	192.168.2.17	0xd028	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.393055916 CET	1.1.1.1	192.168.2.17	0xd028	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.393055916 CET	1.1.1.1	192.168.2.17	0xd028	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.402067900 CET	1.1.1.1	192.168.2.17	0x4838	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:37.402067900 CET	1.1.1.1	192.168.2.17	0x4838	No error (0)	detectportal.prod.mozaws.net	prod.detectportal.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:37.402067900 CET	1.1.1.1	192.168.2.17	0x4838	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.403358936 CET	1.1.1.1	192.168.2.17	0xdca6	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.403358936 CET	1.1.1.1	192.168.2.17	0xdca6	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.403358936 CET	1.1.1.1	192.168.2.17	0xdca6	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.403358936 CET	1.1.1.1	192.168.2.17	0xdca6	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:37.411772966 CET	1.1.1.1	192.168.2.17	0x64ec	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Jan 20, 2025 18:52:37.411772966 CET	1.1.1.1	192.168.2.17	0x64ec	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Jan 20, 2025 18:52:37.411772966 CET	1.1.1.1	192.168.2.17	0x64ec	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Jan 20, 2025 18:52:37.411772966 CET	1.1.1.1	192.168.2.17	0x64ec	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Jan 20, 2025 18:52:39.535945892 CET	1.1.1.1	192.168.2.17	0x11ec	No error (0)	normandy.cdn.mozilla.net	normandy-cdn.services.mozilla.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:39.535945892 CET	1.1.1.1	192.168.2.17	0x11ec	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:39.545545101 CET	1.1.1.1	192.168.2.17	0xeee8	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:43.457314968 CET	1.1.1.1	192.168.2.17	0x736f	No error (0)	a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com	a17.rackcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:43.457314968 CET	1.1.1.1	192.168.2.17	0x736f	No error (0)	a17.rackcdn.com	a17.rackcdn.com.mdc.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:43.457314968 CET	1.1.1.1	192.168.2.17	0x736f	No error (0)	a17.rackcdn.com.mdc.edgesuite.net	a19.dscg10.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:52:43.457314968 CET	1.1.1.1	192.168.2.17	0x736f	No error (0)	a19.dscg10.akamai.net		2.22.61.59	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:43.457314968 CET	1.1.1.1	192.168.2.17	0x736f	No error (0)	a19.dscg10.akamai.net		2.22.61.56	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:52:44.479020119 CET	1.1.1.1	192.168.2.17	0x5bf7	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:06.614694118 CET	1.1.1.1	192.168.2.17	0x1b29	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:06.621979952 CET	1.1.1.1	192.168.2.17	0x685a	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:08.031905890 CET	1.1.1.1	192.168.2.17	0x8e90	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:53:08.031905890 CET	1.1.1.1	192.168.2.17	0x8e90	No error (0)	detectportal.prod.mozaws.net	prod.detectportal.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:53:08.031905890 CET	1.1.1.1	192.168.2.17	0x8e90	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:48.036851883 CET	1.1.1.1	192.168.2.17	0x7c19	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:48.573313951 CET	1.1.1.1	192.168.2.17	0x6fd1	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:53:48.573313951 CET	1.1.1.1	192.168.2.17	0x6fd1	No error (0)	detectportal.prod.mozaws.net	prod.detectportal.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 20, 2025 18:53:48.573313951 CET	1.1.1.1	192.168.2.17	0x6fd1	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:48.670178890 CET	1.1.1.1	192.168.2.17	0x64df	No error (0)	example.org		96.7.128.186	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:48.670178890 CET	1.1.1.1	192.168.2.17	0x64df	No error (0)	example.org		23.215.0.133	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:48.670178890 CET	1.1.1.1	192.168.2.17	0x64df	No error (0)	example.org		96.7.128.192	A (IP address)	IN (0x0001)	false
Jan 20, 2025 18:53:48.670178890 CET	1.1.1.1	192.168.2.17	0x64df	No error (0)	example.org		23.215.0.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com

play.google.com

detectportal.firefox.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49727	34.107.221.82	80	5828	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Jan 20, 2025 18:52:08.381232977 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:08.826986074 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Sun, 19 Jan 2025 23:01:10 GMT Age: 67858 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49734	34.107.221.82	80	5828	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Jan 20, 2025 18:52:09.126231909 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:09.573374033 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 18:05:24 GMT Age: 85605 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49740	34.107.221.82	80	5828	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Jan 20, 2025 18:52:10.532432079 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:11.003038883 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8912 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:11.915505886 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:12.237890959 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:12.745383978 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8914 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:16.385274887 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:16.500063896 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8918 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:17.575898886 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:17.672710896 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8919 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:19.248014927 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:19.447782040 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8921 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:20.518224955 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:20.614836931 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8922 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:30.620753050 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:52:31.191931963 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:31.296595097 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8933 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:37.394566059 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:37.491285086 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8939 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:39.863301992 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:39.981043100 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8941 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:42.657747030 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:42.763267994 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8944 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:45.481831074 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:45.578125954 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8947 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:48.774072886 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:52:48.888818026 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8950 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:52:58.900227070 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:53:08.024792910 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:53:08.121340036 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 8970 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:53:18.128334999 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:53:28.135479927 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:53:38.151521921 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:53:48.166537046 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:53:48.565248966 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Jan 20, 2025 18:53:48.661699057 CET	297	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 20 Jan 2025 15:23:38 GMT Age: 9010 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Jan 20, 2025 18:53:58.682696104 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49743	34.107.221.82	80	5828	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Jan 20, 2025 18:52:12.655235052 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:13.100502014 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75834 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:16.377816916 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:16.484023094 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75837 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:16.607356071 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:16.702032089 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75837 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:17.750083923 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:17.844818115 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75838 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:20.131453037 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:20.226152897 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75841 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:21.089776993 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:21.185149908 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75842 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:31.199037075 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:52:31.299851894 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:31.394555092 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75852 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:39.699707985 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:39.794662952 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75860 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:42.648386002 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:42.758951902 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75863 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:44.699490070 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:44.795272112 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75865 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:46.067661047 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:46.233772993 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75867 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:49.410227060 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:52:49.505127907 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75870 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:52:59.517261982 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:53:09.525305986 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:53:11.048510075 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:53:11.145755053 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75892 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:53:21.160372972 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:53:31.174608946 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:53:41.182495117 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 20, 2025 18:53:48.666620016 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Jan 20, 2025 18:53:48.762857914 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Sun, 19 Jan 2025 20:48:19 GMT Age: 75929 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Jan 20, 2025 18:53:58.769604921 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49709	142.250.186.36	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-20 17:52:05 UTC	635	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCNy9zQEIkcrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-20 17:52:05 UTC	1266	IN	HTTP/1.1 200 OK Date: Mon, 20 Jan 2025 17:52:05 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-mS5OjChjWEZcYYXPAn-c0Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-20 17:52:05 UTC	124	IN	Data Raw: 66 38 39 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 74 68 65 20 68 75 6e 74 69 6e 67 20 70 61 72 74 79 20 6e 62 63 20 72 65 76 69 65 77 22 2c 22 69 6c 6c 69 6e 6f 69 73 20 62 61 73 6b 65 74 62 61 6c 6c 22 2c 22 61 6d 61 7a 6f 6e 20 6f 72 64 65 72 65 64 20 74 6f 20 6e 6f 74 69 66 79 20 70 75 72 63 68 61 73 65 72 73 20 6f 66 20 68 61 7a 61 72 64 6f 75 73 20 70 72 6f 64 75 63 Data Ascii: f89)]}'["",["the hunting party nbc review","illinois basketball","amazon ordered to notify purchasers of hazardous produc
2025-01-20 17:52:05 UTC	1390	IN	Data Raw: 74 73 20 61 6e 64 20 69 73 73 75 65 20 72 65 66 75 6e 64 73 22 2c 22 70 73 35 20 67 61 6d 65 73 22 2c 22 74 69 6b 74 6f 6b 20 61 6c 74 65 72 6e 61 74 69 76 65 20 61 70 70 73 22 2c 22 77 69 6e 74 65 72 20 73 74 6f 72 6d 20 73 6e 6f 77 20 66 6f 72 65 63 61 73 74 22 2c 22 68 6f 75 73 74 6f 6e 20 68 61 6c 66 20 6d 61 72 61 74 68 6f 6e 20 72 65 73 75 6c 74 73 22 2c 22 64 6f 67 65 63 6f 69 6e 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 Data Ascii: ts and issue refunds","ps5 games","tiktok alternative apps","winter storm snow forecast","houston half marathon results","dogecoin"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc
2025-01-20 17:52:05 UTC	1390	IN	Data Raw: 5a 48 59 54 6c 77 62 33 52 52 52 6b 4a 6e 52 56 70 74 61 58 68 78 54 7a 46 4e 61 48 70 72 5a 7a 52 71 5a 55 31 72 4d 6e 67 72 61 47 74 54 53 33 52 77 63 45 70 4f 54 32 68 4b 56 6c 70 30 57 46 4e 33 53 58 5a 6d 52 54 5a 53 51 7a 46 47 53 6a 56 61 52 58 4a 79 53 31 64 77 63 32 38 31 61 30 68 35 62 57 31 6f 4e 55 68 75 59 55 70 53 53 48 42 71 4d 56 4a 50 5a 46 6f 79 4e 6b 56 6d 56 43 39 7a 54 55 35 50 55 31 64 34 4e 47 46 6b 4e 6d 52 5a 62 6d 4e 4a 51 32 64 75 5a 6c 56 6d 62 6e 49 77 5a 33 4e 73 54 56 56 79 53 57 45 32 57 46 52 48 57 54 6c 69 54 30 39 5a 55 30 78 48 54 55 45 76 56 44 56 6a 63 30 67 7a 54 30 74 71 56 48 63 30 63 55 68 69 55 47 77 35 54 32 74 32 56 33 42 74 62 57 46 54 4e 6a 56 34 64 44 45 77 4d 7a 5a 34 65 55 4e 59 4e 48 6c 4b 56 6d 6c 68 53 Data Ascii: ZHYTlwb3RRRkJnRVptaXhxTzFNaHprZzRqZU1rMngraGtTS3RwcEpOT2hKVlp0WFN3SXZmRTZSQzFGSjVaRXJyS1dwc281a0h5bW1oNUhuYUpSSHBqMVJPZFoyNkVmVC9zTU5PU1d4NGFkNmRZbmNJQ2duZlVmbnIwZ3NsTVVySWE2WFRHWTliT09ZU0xHTUEvVDVjc0gzT0tqVHc0cUhiUGw5T2t2V3BtbWFTNjV4dDEwMzZ4eUNYNHlKVmlhS
2025-01-20 17:52:05 UTC	1080	IN	Data Raw: 56 47 4d 32 61 48 59 77 4f 47 4a 5a 57 6b 78 4f 54 30 4e 6e 64 55 6c 77 57 48 6f 34 5a 48 63 7a 5a 54 42 4b 65 6e 52 4b 53 33 5a 4b 63 54 4a 4b 51 30 35 5a 61 56 6b 79 4f 57 4a 44 4b 30 70 59 53 7a 68 6b 52 6a 45 32 52 31 46 30 52 7a 6b 7a 59 30 6b 7a 56 56 52 4e 65 45 52 4b 53 46 52 70 55 6a 51 7a 56 6c 70 49 4d 55 6c 36 54 46 6c 4f 63 30 4a 30 4e 6a 6c 4e 54 47 52 6d 61 55 35 4f 55 31 4a 77 64 45 63 32 62 48 64 6c 4f 56 6c 4c 5a 47 51 30 5a 7a 52 35 56 46 52 51 51 57 34 78 65 44 41 32 55 6d 4d 79 55 7a 42 46 63 33 70 35 55 45 46 44 65 6e 4e 58 59 6e 56 55 5a 33 70 54 4f 58 42 59 51 30 6c 47 51 6a 56 52 57 46 55 35 62 46 64 79 64 56 64 61 5a 46 52 46 53 45 6c 6a 64 54 5a 6d 52 47 6f 34 4e 48 4d 72 53 7a 4e 51 61 6b 6c 6d 51 6a 64 51 4c 30 46 47 61 33 42 Data Ascii: VGM2aHYwOGJZWkxOT0NndUlwWHo4ZHczZTBKenRKS3ZKcTJKQ05ZaVkyOWJDK0pYSzhkRjE2R1F0RzkzY0kzVVRNeERKSFRpUjQzVlpIMUl6TFlOc0J0NjlNTGRmaU5OU1JwdEc2bHdlOVlLZGQ0ZzR5VFRQQW4xeDA2UmMyUzBFc3p5UEFDenNXYnVUZ3pTOXBYQ0lGQjVRWFU5bFdydVdaZFRFSEljdTZmRGo4NHMrSzNQaklmQjdQL0FGa3B
2025-01-20 17:52:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49712	142.250.186.36	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-20 17:52:05 UTC	538	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCNy9zQEIkcrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-20 17:52:05 UTC	1018	IN	HTTP/1.1 200 OK Version: 716114710 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Mon, 20 Jan 2025 17:52:05 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-20 17:52:05 UTC	372	IN	Data Raw: 32 36 38 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 32 64 20 67 62 5f 51 65 20 67 62 5f 71 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 268d)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2025-01-20 17:52:05 UTC	1390	IN	Data Raw: 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 72 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 33 64 5c 22 30 20 30 20 32 34 20 32 34 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 Data Ascii: class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u0
2025-01-20 17:52:05 UTC	1390	IN	Data Raw: 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 75 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 61 64 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 Data Ascii: 003cdiv class\u003d\"gb_wd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_ud\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003cdiv class\u003d\"gb_ad\"\u003e \u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d
2025-01-20 17:52:05 UTC	1390	IN	Data Raw: 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 71 30 2d 31 33 20 Data Ascii: ss\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810q0-13
2025-01-20 17:52:05 UTC	1390	IN	Data Raw: 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 32 30 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c Data Ascii: 1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,20c1.1,0 2,-0.9 2,
2025-01-20 17:52:05 UTC	1390	IN	Data Raw: 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 33 31 34 2c 33 37 30 31 33 38 34 2c 31 30 32 32 37 38 32 30 35 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 Data Ascii: enu-content","metadata":{"bar_height":60,"experiment_id":[3700314,3701384,102278205],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};(function(_){var window
2025-01-20 17:52:05 UTC	1390	IN	Data Raw: 41 72 72 61 79 28 62 29 3b 66 6f 72 28 6c 65 74 20 64 5c 75 30 30 33 64 30 3b 64 5c 75 30 30 33 63 62 3b 64 2b 2b 29 63 5b 64 5d 5c 75 30 30 33 64 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 4c 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 4b 64 28 62 5c 75 30 30 33 64 5c 75 30 30 33 65 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 61 2b 5c 22 3a 5c 22 29 7d 3b 5f 2e 4d 64 5c 75 30 30 33 64 67 6c 6f 62 61 6c 54 68 69 73 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 5f 2e 4e 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 Data Ascii: Array(b);for(let d\u003d0;d\u003cb;d++)c[d]\u003da[d];return c}return[]};Ld\u003dfunction(a){return new _.Kd(b\u003d\u003eb.substr(0,a.length+1).toLowerCase()\u003d\u003d\u003da+\":\")};_.Md\u003dglobalThis.trustedTypes;_.Nd\u003dclass{constructor(a){this
2025-01-20 17:52:05 UTC	1165	IN	Data Raw: 5f 2e 61 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 5a 64 29 72 65 74 75 72 6e 20 61 2e 69 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 48 5c 22 29 3b 7d 3b 5f 2e 63 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 62 65 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 64 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4e 64 29 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4e 64 29 61 5c 75 30 30 33 64 61 2e 69 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 48 5c 22 29 3b 65 6c 73 65 20 61 5c 75 30 30 33 64 5f 2e 63 65 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 65 65 5c Data Ascii: _.ae\u003dfunction(a){if(a instanceof _.Zd)return a.i;throw Error(\"H\");};_.ce\u003dfunction(a){if(be.test(a))return a};_.de\u003dfunction(a){if(a instanceof _.Nd)if(a instanceof _.Nd)a\u003da.i;else throw Error(\"H\");else a\u003d_.ce(a);return a};_.ee\
2025-01-20 17:52:05 UTC	390	IN	Data Raw: 31 37 66 0d 0a 65 28 61 29 29 3a 6a 65 7c 7c 28 6a 65 5c 75 30 30 33 64 6e 65 77 20 6b 65 29 7d 3b 5f 2e 6e 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 73 74 72 69 6e 67 5c 22 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 29 3a 62 7d 3b 5f 2e 55 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 5c 75 30 30 33 64 62 7c 7c 64 6f 63 75 6d 65 6e 74 3b 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3f 61 5c 75 30 30 33 64 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 29 5b 30 5d 3a 28 63 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 2c 61 3f 61 5c 75 Data Ascii: 17fe(a)):je\|\|(je\u003dnew ke)};_.ne\u003dfunction(a,b){return typeof b\u003d\u003d\u003d\"string\"?a.getElementById(b):b};_.U\u003dfunction(a,b){var c\u003db\|\|document;c.getElementsByClassName?a\u003dc.getElementsByClassName(a)[0]:(c\u003ddocument,a?a\u
2025-01-20 17:52:05 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 7c 6e 75 6c 6c 29 29 3b 72 65 74 75 72 6e 20 61 7c 7c 6e 75 6c 6c 7d 3b 5c 6e 5f 2e 70 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 43 62 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 73 74 79 6c 65 5c 22 3f 61 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 5c 75 30 30 33 64 63 3a 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 63 6c 61 73 73 5c 22 3f 61 2e 63 6c 61 73 73 4e 61 6d 65 5c 75 30 30 33 64 63 3a 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 66 6f 72 5c 22 3f 61 2e 68 74 6d 6c 46 6f 72 5c 75 30 30 33 64 63 3a 6f 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 64 29 3f 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6f 65 5b 64 5d 2c 63 29 3a 5f 2e 55 64 28 64 2c Data Ascii: 8000\|null));return a\|\|null};\n_.pe\u003dfunction(a,b){_.Cb(b,function(c,d){d\u003d\u003d\"style\"?a.style.cssText\u003dc:d\u003d\u003d\"class\"?a.className\u003dc:d\u003d\u003d\"for\"?a.htmlFor\u003dc:oe.hasOwnProperty(d)?a.setAttribute(oe[d],c):_.Ud(d,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49713	142.250.186.36	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-20 17:52:05 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-20 17:52:05 UTC	933	IN	HTTP/1.1 200 OK Version: 716114710 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Mon, 20 Jan 2025 17:52:05 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-20 17:52:05 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2025-01-20 17:52:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49729	142.250.185.142	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-20 17:52:09 UTC	726	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 905 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-20 17:52:09 UTC	905	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 34 39 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 37 33 39 35 35 32 36 39 33 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.149"],[1,0,0,0,0]]],373,[["1737395526937",null,null,null,
2025-01-20 17:52:09 UTC	950	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=phFCQxDIanPZorzPynPoHBXfFwFHNrd9Lxd0GSz-P3Fs10h8BkhlCr2872RfSjz6q6Xp_vIpF6ALTDhoUc01DbXMAqULkYbdxQRSZq9qlo1h9DNolgV3VgEiS8cHQ7E_XmHfzbxqX_ZnsjREpR0y5J5ITlfX0RrCyw9VcJx1Icys8qOn8C69AggbbJapESKZ; expires=Tue, 22-Jul-2025 17:52:09 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 20 Jan 2025 17:52:09 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 20 Jan 2025 17:52:09 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-20 17:52:09 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-01-20 17:52:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49738	142.250.185.142	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-20 17:52:11 UTC	936	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=phFCQxDIanPZorzPynPoHBXfFwFHNrd9Lxd0GSz-P3Fs10h8BkhlCr2872RfSjz6q6Xp_vIpF6ALTDhoUc01DbXMAqULkYbdxQRSZq9qlo1h9DNolgV3VgEiS8cHQ7E_XmHfzbxqX_ZnsjREpR0y5J5ITlfX0RrCyw9VcJx1Icys8qOn8C69AggbbJapESKZ
2025-01-20 17:52:11 UTC	910	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 34 39 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 37 33 39 35 35 32 38 39 33 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.149"],[1,0,0,0,0]]],373,[["1737395528936",null,null,null,
2025-01-20 17:52:11 UTC	958	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=OpGO2FkbayFEYMGR9t2ZK-Z96JDZrLvWkyjCBuXwZBJhlHy7CXBoY3y9EKuc5sMmHaWcYntO0k1hjHTZoY5IWcc6AO1ZCapn-bgcnR76Q2__NzEUSYF2W2SHAx1ZsVj4zgyHYIU_5MomvN49HP5QC6kphdeOIZ9QWG2jLJvn136flkUCClcF18fvGiZTh_YYv9YVN6si; expires=Tue, 22-Jul-2025 17:52:11 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 20 Jan 2025 17:52:11 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 20 Jan 2025 17:52:11 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-20 17:52:11 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-01-20 17:52:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	12:51:46
Start date:	20/01/2025
Path:	C:\Windows\System32\loaddll64.exe
Wow64 process (32bit):	false
Commandline:	loaddll64.exe "C:\Users\user\Desktop\mscoree.dll"
Imagebase:	0x7ff693640000
File size:	165'888 bytes
MD5 hash:	763455F9DCB24DFEECC2B9D9F8D46D52
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	12:51:46
Start date:	20/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff772470000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:51:46
Start date:	20/01/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\mscoree.dll",#1
Imagebase:	0x7ff79f820000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:51:46
Start date:	20/01/2025
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\mscoree.dll",#1
Imagebase:	0x7ff63ccd0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	12:52:02
Start date:	20/01/2025
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe"
Imagebase:	0x7ff6aeea0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	12:52:02
Start date:	20/01/2025
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe"
Imagebase:	0x7ff7edf80000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	12:52:03
Start date:	20/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	12:52:03
Start date:	20/01/2025
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2212 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2ad9795c-bfec-4a59-9af3-8c3376ad500c} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232ca86c510 socket
Imagebase:	0x7ff7edf80000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	12:52:03
Start date:	20/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1820,i,13358357324059123843,13037745772184586689,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	12:52:05
Start date:	20/01/2025
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3400 -parentBuildID 20230927232528 -prefsHandle 3224 -prefMapHandle 3220 -prefsLen 25337 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b1b12ce8-1418-4648-909e-d132dd7b09ac} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232ca842910 rdd
Imagebase:	0x7ff7edf80000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	12:52:15
Start date:	20/01/2025
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5124 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 5064 -prefMapHandle 5060 -prefsLen 33416 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c940e8e0-6a4b-4b99-bff8-a7fea8b330be} 5828 "\\.\pipe\gecko-crash-server-pipe.5828" 232d7674310 utility
Imagebase:	0x7ff7edf80000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	28
Start time:	12:52:22
Start date:	20/01/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\cmd.exe"
Imagebase:	0x7ff79f820000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	12:52:22
Start date:	20/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff772470000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	12:52:36
Start date:	20/01/2025
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	regsvr32 /s mscoree.dll
Imagebase:	0x7ff6ddbe0000
File size:	25'088 bytes
MD5 hash:	B0C2FA35D14A9FAD919E99D9D75E1B9E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	12:52:40
Start date:	20/01/2025
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 mscoree.dll
Imagebase:	0x7ff63ccd0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report mscoree.dll

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\uninstall_ping_308046B0AF4A39CB_4c7bb390-e611-4a66-a3ab-25c1a1050ad3.json (copy)

C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\uninstall_ping_308046B0AF4A39CB_4c7bb390-e611-4a66-a3ab-25c1a1050ad3.json.tmp

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

C:\Users\user\AppData\Local\Temp\tmpaddon

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\ExperimentStoreData.json (copy)

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\ExperimentStoreData.json.tmp

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\addonStartup.json.lz4 (copy)

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\addonStartup.json.lz4.tmp

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\addons.json (copy)

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\addons.json.tmp

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\content-prefs.sqlite

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\crashes\store.json.mozlz4 (copy)

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\crashes\store.json.mozlz4.tmp

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\extensions.json (copy)

Windows Analysis Report
mscoree.dll